Security Signal
Threat intelligence report · last 30 days

Official · Palo Alto Networks

Generated 8 Nov 2026, 21:23 UTC · Live view: news.rogelio.cloud/?show=all&tier=1&vendor=Palo+Alto+Networks

Executive summary

  • 2 stories in the last 30 days; 2 (100%) confirmed by official sources.
  • 2 involve vulnerabilities attackers are already exploiting. Patch these first.
  • Most common topic: Actively exploited (2).
  • Most reported vendor: Palo Alto Networks (2 stories).
  • 6 of the listed vulnerabilities are on CISA's exploited list.
2
Stories
2
Actively exploited
0
Breaches & ransomware
2
Confirmed by official sources

Stories per day

1 10-1010-1510-2010-2510-3011-0411-08

Daily breakdown, last 14 days

M26 T271 W28 T291 F30 S31 S1 M2 T3 W4 T5 F6 S7 S8

Exploited Breach / ransomware Other

Topics

Most reported vendors

Palo Alto Networks2Cisco1Google1PHP Group1

Top stories · newest days first, most confident within each day

  1. Confirmed 100Actively exploited
    31 Oct 2026
    CISA Adds Two Known Exploited Vulnerabilities to Catalog 3 sources: CISA Advisories, AWS Security Bulletins, Palo Alto Networks Security Advisories
    Vendor GoogleVendor Palo Alto Networks
    CVE-2026-111497CVE-2026-48356CVE-2026-41709CVE-2026-46300
  2. Confirmed 100Actively exploited
    30 Oct 2026
    CVE-2026-109618 Impact of Critical Vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619) on Palo Alto Networks Products (Severity: CRITICAL) 3 sources: Unit 42, Palo Alto Networks Security Advisories, Cisco Security Advisories
    Vendor CiscoVendor PHP GroupVendor Palo Alto Networks
    CVE-2026-109618CVE-2026-109619

Vulnerabilities to watch

CVEProductExploitedCVSSEPSSFixFixed in / due
CVE-2026-109618PHP Group PHPExploited—100.0%Patch availablePHP 8.2.35, PHP 8.3.36, PHP 8.4.27
Due 29 Oct 2026
CVE-2026-109619PHP Group PHPExploited—100.0%Patch availablePHP 8.2.35, PHP 8.3.36, PHP 8.4.27
Due 29 Oct 2026
CVE-2026-111497Google BrotliExploited—82.6%Patch availableBrotli 1.0.10, Brotli 1.1.1, Brotli 1.2.1
Due 10 Nov 2026
CVE-2026-48356Adobe Commerce and MagentoExploited—47.5%Patch availableAdobe Commerce 2.4.9-2026-jul, 2.4.8-2026-jul, 2.4.7-2026-jul, 2.4.6-2026-j, Adobe Commerce B2B 1.5.3-2026-jul, 1.5.2-2026-jul, 1.4.2-2026-jul, 1.3.4-2026-j, Magento Open Source 2.4.9-2026-jul, 2.4.8-2026-jul, 2.4.7-2026-jul, 2.4.6-2026-j
Due 10 Nov 2026
CVE-2026-46300Linux KernelExploited—16.1%Patch availableLinux 3599e6b3cc1ada96883d496a50a210d3afbb6987, Linux 2f2b16022a2e10ca7bccfb98db5ed2ec0f72641c, Linux 9d3e5fd19fe1063bf607219e8562fbd567b8e8d5
Due 31 Oct 2026
CVE-2026-41709Broadcom VMware ESXExploited—0.7%Patch availableCloud Foundation 5.2.4, ESX ESXi-9.1.0.0-25370933, ESX ESXi-9.0.2.0100-25595025
Due 11 Nov 2026

Sources: official agencies, vendor security teams and the security press, linked from each story. Confidence scores reflect who reported each story. Tags and summaries are generated automatically and may be incomplete.