Security Signal
Threat intelligence report · last 30 days
Exploited in the wild · "CVE-2026-20320"
Generated 12 Nov 2026, 02:22 UTC · Live view: news.rogelio.cloud/?q=CVE-2026-20320&view=exploited
Executive summary
- 3 stories in the last 30 days; 3 (100%) confirmed by official sources.
- 3 involve vulnerabilities attackers are already exploiting. Patch these first.
- Most common topic: Actively exploited (3).
- Most reported vendor: Cisco (2 stories).
- 12 of the listed vulnerabilities are on CISA's exploited list.
3
Stories
3
Actively exploited
0
Breaches & ransomware
3
Confirmed by official sources
Stories per day
Daily breakdown, last 14 days
Exploited Breach / ransomware Other
Topics
Most reported vendors
Top stories · newest days first, most confident within each day
Vulnerabilities to watch
| CVE | Product | Exploited | CVSS | EPSS | Fix | Fixed in / due |
|---|---|---|---|---|---|---|
| CVE-2026-109618 | PHP Group PHP | Exploited | — | 100.0% | Patch available | PHP 8.2.35, PHP 8.3.36, PHP 8.4.27 Due 29 Oct 2026 |
| CVE-2026-109619 | PHP Group PHP | Exploited | — | 100.0% | Patch available | PHP 8.2.35, PHP 8.3.36, PHP 8.4.27 Due 29 Oct 2026 |
| CVE-2026-111497 | Google Brotli | Exploited | — | 82.6% | Patch available | Brotli 1.0.10, Brotli 1.1.1, Brotli 1.2.1 Due 10 Nov 2026 |
| CVE-2026-97229 | GitLab Community Edition and Enterprise Edition | Exploited | — | 65.2% | Patch available | GitLab 19.2.8, GitLab 19.3.5, GitLab 19.4.2 Due 1 Nov 2026 |
| CVE-2026-48356 | Adobe Commerce and Magento | Exploited | — | 47.5% | Patch available | Adobe Commerce 2.4.9-2026-jul, 2.4.8-2026-jul, 2.4.7-2026-jul, 2.4.6-2026-j, Adobe Commerce B2B 1.5.3-2026-jul, 1.5.2-2026-jul, 1.4.2-2026-jul, 1.3.4-2026-j, Magento Open Source 2.4.9-2026-jul, 2.4.8-2026-jul, 2.4.7-2026-jul, 2.4.6-2026-j Due 10 Nov 2026 |
| CVE-2026-123158 | OpenBSD OpenSSH | Exploited | — | 16.5% | Patch available | OpenSSH 10.6p2 Due 12 Nov 2026 |
| CVE-2026-46300 | Linux Kernel | Exploited | — | 16.1% | Patch available | Linux 3599e6b3cc1ada96883d496a50a210d3afbb6987, Linux 2f2b16022a2e10ca7bccfb98db5ed2ec0f72641c, Linux 9d3e5fd19fe1063bf607219e8562fbd567b8e8d5 Due 31 Oct 2026 |
| CVE-2026-116779 | SignalWire FreeSwitch | Exploited | — | 2.2% | No fix known yet | — Due 12 Nov 2026 |
| CVE-2026-116606 | Barracuda Networks Barracuda Email Security Gateway (ESG) | Exploited | — | 1.6% | Patch available | Barracuda Email Security Gateway (ESG) 9.4.0.030 Due 13 Nov 2026 |
| CVE-2024-27834 | Apple Multiple Products | Exploited | — | 1.5% | Patch available | Safari 17.5, iOS and iPadOS 16.7.8, iOS and iPadOS 17.5 Due 18 Nov 2026 |
| CVE-2026-119977 | WordPress WordPress Core | Exploited | — | 1.2% | No fix known yet | — Due 6 Nov 2026 |
| CVE-2026-111560 | Barracuda Networks Multiple Products | Exploited | — | 1.1% | No fix known yet | — Due 13 Nov 2026 |