Security Signal
Back to the feed Tip: choose "Save as PDF" in the print dialog. Links stay clickable.
Threat intelligence report · last 30 days

Exploited in the wild · "CVE-2026-109618" · last 7 days

Generated 5 Nov 2026, 02:10 UTC · Live view: news.rogelio.cloud/?q=CVE-2026-109618&view=exploited&since=7d

Executive summary

  • 2 stories in the last 30 days; 2 (100%) confirmed by official sources.
  • 2 involve vulnerabilities attackers are already exploiting. Patch these first.
  • Most common topic: Actively exploited (2).
  • Most reported vendor: PHP Group (2 stories).
  • 12 of the listed vulnerabilities are on CISA's exploited list.
2
Stories
2
Actively exploited
0
Breaches & ransomware
2
Confirmed by official sources

Stories per day

1 10-0710-1210-1710-2210-2711-0111-05

Activity calendar

MonWedFriSun2026-10-07: 02026-10-08: 02026-10-09: 02026-10-10: 02026-10-11: 02026-10-12: 02026-10-13: 02026-10-14: 02026-10-15: 02026-10-16: 02026-10-17: 02026-10-18: 02026-10-19: 02026-10-20: 02026-10-21: 02026-10-22: 02026-10-23: 12026-10-24: 02026-10-25: 02026-10-26: 02026-10-27: 02026-10-28: 02026-10-29: 12026-10-30: 02026-10-31: 02026-11-01: 02026-11-02: 02026-11-03: 02026-11-04: 02026-11-05: 0

Brighter = busier day.

Topics

  • Actively exploited — 2 (100%)

Countries in the news

Fiji: 0United Republic of Tanzania: 0Western Sahara: 0Canada: 0United States of America: 0Kazakhstan: 0Uzbekistan: 0Papua New Guinea: 0Indonesia: 0Argentina: 0Chile: 0Democratic Republic of the Congo: 0Somalia: 0Kenya: 0Sudan: 0Chad: 0Haiti: 0Dominican Republic: 0Russian Federation: 0Bahamas: 0Falkland Islands (Malvinas): 0Norway: 0Greenland: 0French Southern Territories: 0Timor-Leste: 0South Africa: 0Lesotho: 0Mexico: 0Uruguay: 0Brazil: 0Bolivia: 0Peru: 0Colombia: 0Panama: 0Costa Rica: 0Nicaragua: 0Honduras: 0El Salvador: 0Guatemala: 0Belize: 0Venezuela: 0Guyana: 0Suriname: 0France: 0Ecuador: 0Puerto Rico: 0Jamaica: 0Cuba: 0Zimbabwe: 0Botswana: 0Namibia: 0Senegal: 0Mali: 0Mauritania: 0Benin: 0Niger: 0Nigeria: 0Cameroon: 0Togo: 0Ghana: 0Cote d'Ivoire: 0Guinea: 0Guinea-Bissau: 0Liberia: 0Sierra Leone: 0Burkina Faso: 0Central African Republic: 0Republic of the Congo: 0Gabon: 0Equatorial Guinea: 0Zambia: 0Malawi: 0Mozambique: 0Eswatini: 0Angola: 0Burundi: 0Israel: 0Lebanon: 0Madagascar: 0State of Palestine: 0Republic of The Gambia: 0Tunisia: 0Algeria: 0Jordan: 0United Arab Emirates: 0Qatar: 0Kuwait: 0Iraq: 0Oman: 0Vanuatu: 0Cambodia: 0Thailand: 0Lao People's Democratic Republic: 0Myanmar: 0Vietnam: 0North Korea: 0South Korea: 0Mongolia: 0India: 0Bangladesh: 0Bhutan: 0Nepal: 0Pakistan: 0Afghanistan: 0Tajikistan: 0Kyrgyzstan: 0Turkmenistan: 0Islamic Republic of Iran: 0Syrian Arab Republic: 0Armenia: 0Sweden: 0Belarus: 0Ukraine: 0Poland: 0Austria: 0Hungary: 0Moldova, Republic of: 0Romania: 0Lithuania: 0Latvia: 0Estonia: 0Germany: 0Bulgaria: 0Greece: 0Türkiye: 0Albania: 0Croatia: 0Switzerland: 0Luxembourg: 0Belgium: 0Netherlands: 0Portugal: 0Spain: 0Ireland: 0New Caledonia: 0Solomon Islands: 0New Zealand: 0Australia: 0Sri Lanka: 0People's Republic of China: 0Taiwan, Province of China: 0Italy: 0Denmark: 0United Kingdom: 0Iceland: 0Azerbaijan: 0Georgia: 0Philippines: 0Malaysia: 0Brunei Darussalam: 0Slovenia: 0Finland: 0Slovakia: 0Czech Republic: 0Eritrea: 0Japan: 0Paraguay: 0Yemen: 0Saudi Arabia: 0Cyprus: 0Morocco: 0Egypt: 0Libya: 0Ethiopia: 0Djibouti: 0Uganda: 0Rwanda: 0Bosnia and Herzegovina: 0The Republic of North Macedonia: 0Serbia: 0Montenegro: 0Kosovo: 0Trinidad and Tobago: 0South Sudan: 0

No countries tagged yet.

Most reported vendors

PHP Group2Adobe1Apple1Arista1Broadcom1Cisco1GitLab1Google1Ivanti1Linux1

ATT&CK techniques

No data

Top stories

#StoryConfidenceUpdated
1PHP2Shell: What to know about two critical PHP flaws
Original article		Confirmed 100
Actively exploited		4 Nov 2026
2CVE-2026-109618 Impact of Critical Vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619) on Palo Alto Networks Products (Severity: CRITICAL)
Original article		Confirmed 100
Actively exploited		30 Oct 2026

Vulnerabilities to watch

CVEProductExploitedCVSSEPSS
CVE-2024-27834Apple Multiple ProductsExploited——
CVE-2026-109618PHP Group PHPExploited——
CVE-2026-109619PHP Group PHPExploited——
CVE-2026-111357Ivanti Connect SecureExploited——
CVE-2026-111497Google BrotliExploited——
CVE-2026-114625Arista VeloCloud OrchestratorExploited——
CVE-2026-118527Ivanti Connect SecureExploited——
CVE-2026-119977WordPress WordPress CoreExploited——
CVE-2026-41709Broadcom VMware ESXExploited——
CVE-2026-46300Linux KernelExploited——
CVE-2026-48356Adobe Commerce and MagentoExploited——
CVE-2026-97229GitLab Community Edition and Enterprise EditionExploited——

Sources: official agencies, vendor security teams and the security press, linked from each story. Confidence scores reflect who reported each story. Tags and summaries are generated automatically and may be incomplete.