Security Signal
Threat intelligence report · last 30 days
Exploited in the wild · last 30 days · Cisco
Generated 5 Nov 2026, 06:32 UTC · Live view: news.rogelio.cloud/?view=exploited&since=30d&vendor=Cisco
Executive summary
- 6 stories in the last 30 days; 4 (67%) confirmed by official sources.
- 6 involve vulnerabilities attackers are already exploiting. Patch these first.
- Most common topic: Actively exploited (6).
- Most reported vendor: Cisco (6 stories).
- 6 of the listed vulnerabilities are on CISA's exploited list.
6
Stories
6
Actively exploited
0
Breaches & ransomware
4
Confirmed by official sources
Stories per day
Daily breakdown, last 14 days
Exploited Breach / ransomware Other
Topics
- Actively exploited — 6 (100%)
Most reported vendors
Top stories
| # | Story | Confidence | Updated |
|---|---|---|---|
| 1 | Vulnerabilities in Node.js and Brotli Affecting Cisco Products: October 2026 Original article | Confirmed 100 Actively exploited | 4 Nov 2026 |
| 2 | CVE-2026-109618 Impact of Critical Vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619) on Palo Alto Networks Products (Severity: CRITICAL) Original article | Confirmed 100 Actively exploited | 30 Oct 2026 |
| 3 | CVE-2026-76418 (Cisco Secure Firewall ASA Software and Cisco Secure FTD Software) added to CISA Known Exploited Vulnerabilities Original article | Confirmed 100 Actively exploited | 29 Oct 2026 |
| 4 | Cisco Expressway Series Security Hardening Release: October 2026 Original article | Confirmed 100 Actively exploited | 27 Oct 2026 |
| 5 | CISA Adds Actively Exploited GitLab RCE and Cisco Firewall DoS Flaws to KEV Original article | Reported 80 Actively exploited | 30 Oct 2026 |
| 6 | Inside KeyDrift: Analyzing historical UAT-11473 activity on Cisco SD-WAN Original article | Reported 70 Actively exploited | 28 Oct 2026 |
Vulnerabilities to watch
| CVE | Product | Exploited | CVSS | EPSS |
|---|---|---|---|---|
| CVE-2026-109618 | PHP Group PHP | Exploited | — | 100.0% |
| CVE-2026-109619 | PHP Group PHP | Exploited | — | 100.0% |
| CVE-2026-20127 | Cisco Catalyst SD-WAN Controller and Manager | Exploited | — | 87.6% |
| CVE-2026-111497 | Google Brotli | Exploited | — | 82.6% |
| CVE-2026-97229 | GitLab Community Edition and Enterprise Edition | Exploited | — | 65.2% |
| CVE-2026-76418 | Cisco Secure Firewall ASA Software and Cisco Secure FTD Software | Exploited | — | 0.8% |