Security Signal
Threat intelligence report · last 30 days

Vendor research · Cisco

Generated 7 Nov 2026, 10:25 UTC · Live view: news.rogelio.cloud/?show=all&tier=3&vendor=Cisco

Executive summary

  • 2 stories in the last 30 days; 1 (50%) confirmed by official sources.
  • 2 involve vulnerabilities attackers are already exploiting. Patch these first.
  • Most common topic: Actively exploited (2).
  • Most reported vendor: Cisco (2 stories).
  • 3 of the listed vulnerabilities are on CISA's exploited list.
2
Stories
2
Actively exploited
0
Breaches & ransomware
1
Confirmed by official sources

Stories per day

1 10-0910-1410-1910-2410-2911-0311-07

Daily breakdown, last 14 days

S25 M26 T27 W281 T291 F30 S31 S1 M2 T3 W4 T5 F6 S7

Exploited Breach / ransomware Other

Topics

Most reported vendors

Cisco2PHP Group1Palo Alto Networks1

Top stories · newest days first, most confident within each day

  1. Confirmed 100Actively exploited
    30 Oct 2026
    CVE-2026-109618 Impact of Critical Vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619) on Palo Alto Networks Products (Severity: CRITICAL) 3 sources: Unit 42, Palo Alto Networks Security Advisories, Cisco Security Advisories
    Vendor CiscoVendor PHP GroupVendor Palo Alto Networks
    CVE-2026-109618CVE-2026-109619
  2. Reported 70Actively exploited
    28 Oct 2026
    Inside KeyDrift: Analyzing historical UAT-11473 activity on Cisco SD-WAN Source: Cisco Talos
    Vendor Cisco
    CVE-2026-20127

Vulnerabilities to watch

CVEProductExploitedCVSSEPSS
CVE-2026-109618PHP Group PHPExploited—100.0%
CVE-2026-109619PHP Group PHPExploited—100.0%
CVE-2026-20127Cisco Catalyst SD-WAN Controller and ManagerExploited—87.6%

Sources: official agencies, vendor security teams and the security press, linked from each story. Confidence scores reflect who reported each story. Tags and summaries are generated automatically and may be incomplete.