Security Signal
Threat intelligence report · last 30 days
last 7 days · GitLab
Generated 5 Nov 2026, 06:08 UTC · Live view: news.rogelio.cloud/?show=all&since=7d&vendor=GitLab
Executive summary
- 5 stories in the last 30 days; 4 (80%) confirmed by official sources.
- 2 involve vulnerabilities attackers are already exploiting. Patch these first.
- Most common topic: Vulnerability (3).
- Most reported vendor: GitLab (5 stories).
- 12 of the listed vulnerabilities are on CISA's exploited list.
5
Stories
2
Actively exploited
0
Breaches & ransomware
4
Confirmed by official sources
Stories per day
Daily breakdown, last 14 days
Exploited Breach / ransomware Other
Topics
- Vulnerability — 3 (60%)
- Actively exploited — 2 (40%)
Most reported vendors
Top stories
| # | Story | Confidence | Updated |
|---|---|---|---|
| 1 | 2026-019: Critical Vulnerability in GitLab Community and Enterprise Editions Original article | Confirmed 100 Vulnerability | 5 Nov 2026 |
| 2 | 2026-016: Critical Vulnerability in GitLab CE and EE Original article | Confirmed 100 Vulnerability | 5 Nov 2026 |
| 3 | PHP2Shell: What to know about two critical PHP flaws Original article | Confirmed 100 Actively exploited | 4 Nov 2026 |
| 4 | A Vulnerability in Brotli Library Could Allow for Remote Code Execution Original article | Confirmed 100 Vulnerability | 30 Oct 2026 |
| 5 | CISA Adds Actively Exploited GitLab RCE and Cisco Firewall DoS Flaws to KEV Original article | Reported 80 Actively exploited | 30 Oct 2026 |
Vulnerabilities to watch
| CVE | Product | Exploited | CVSS | EPSS |
|---|---|---|---|---|
| CVE-2026-109618 | PHP Group PHP | Exploited | — | 100.0% |
| CVE-2026-109619 | PHP Group PHP | Exploited | — | 100.0% |
| CVE-2026-111497 | Google Brotli | Exploited | — | 82.6% |
| CVE-2026-97229 | GitLab Community Edition and Enterprise Edition | Exploited | — | 65.2% |
| CVE-2026-48356 | Adobe Commerce and Magento | Exploited | — | 47.5% |
| CVE-2026-46300 | Linux Kernel | Exploited | — | 16.1% |
| CVE-2026-114625 | Arista VeloCloud Orchestrator | Exploited | — | 1.0% |
| CVE-2026-119977 | WordPress WordPress Core | Exploited | — | 1.0% |
| CVE-2026-118527 | Ivanti Connect Secure | Exploited | — | 0.8% |
| CVE-2026-41709 | Broadcom VMware ESX | Exploited | — | 0.7% |
| CVE-2024-27834 | Apple Multiple Products | Exploited | — | 0.6% |
| CVE-2026-111357 | Ivanti Connect Secure | Exploited | — | 0.5% |