Urgent advisories, exploited vulnerabilities and incidents. Current Signal data is server-rendered for readers and search engines, with source attribution and update timestamps.
Updated 3 minutes agoSource: CISA
Cyber theSIGNAL
Urgent advisories, exploited vulnerabilities and incidents · LIVE · UPDATED 3 MINUTES AGO
Ivanti Connect Secure contains a generation of predictable numbers or identifiers vulnerability that allows a remote authenticated attacker to upload files with attacker-controlled content to a known location on disk. This vulnerability can be chained with CVE-2026-104935 and…
CISA Known Exploited Vulnerabilities CatalogUnited States1 day ago
Nov 13remediation due▲ 18%
MajorCISA lists this vulnerability as known to be exploited in the wild.
Ivanti Connect Secure contains a missing authentication for critical function vulnerability that could allow a local authenticated attacker to escalate their privileges. This vulnerability can be chained with CVE-2026-104935 and CVE-2026-118527. Required action: Apply mitigations in accordance with…
CISA Known Exploited Vulnerabilities CatalogUnited States1 day ago
Nov 2remediation due▲ 18%
MajorCISA lists this vulnerability as known to be exploited in the wild.
GitLab Community Edition and Enterprise Edition contain a integer overflow or wraparound vulnerability that could allow an unauthenticated user to execute arbitrary code on the GitLab server via a specially crafted regular expression in a CI/CD configuration, due…
CISA Known Exploited Vulnerabilities CatalogUnited States2 days ago
Nov 1remediation due▲ 18%
MajorCISA lists this vulnerability as known to be exploited in the wild.
Cisco Secure Firewall ASA Software and Cisco Secure FTD Software contains an unchecked return value to NULL pointer dereference vulnerability that could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial…
CISA Known Exploited Vulnerabilities CatalogUnited States2 days ago
Nov 1remediation due▲ 18%
MajorCISA lists this vulnerability as known to be exploited in the wild.
Broadcom VMWare ESX contains an insufficient logging vulnerability that could allow a malicious actor with admin access to perform certain operations without being logged. Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD…
CISA Known Exploited Vulnerabilities CatalogUnited States3 days ago
Nov 11remediation due▲ 18%
MajorCISA lists this vulnerability as known to be exploited in the wild.
Linux Kernel contains a missing initialization of a variable vulnerability that could allow for unintended modification of page-cache-backed data via failure to preserve the shared-fragment marker during socket buffer coalescing, causing ESP input processing to decrypt shared fragments…
CISA Known Exploited Vulnerabilities CatalogUnited States3 days ago
Oct 31remediation due▲ 18%
MajorCISA lists this vulnerability as known to be exploited in the wild.
Adobe Commerce and Magento contain an unrestricted upload of file with dangerous type vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account…
CISA Known Exploited Vulnerabilities CatalogUnited States4 days ago
Nov 10remediation due▲ 18%
MajorCISA lists this vulnerability as known to be exploited in the wild.
Google Brotli contains an unchecked return value vulnerability that allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed…
CISA Known Exploited Vulnerabilities CatalogUnited States4 days ago
Nov 10remediation due▲ 18%
MajorCISA lists this vulnerability as known to be exploited in the wild.
Current snapshot
What this theSIGNAL is seeing now
Official · 98%
CVE-2026-118527 · Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability
Ivanti Connect Secure contains a generation of predictable numbers or identifiers vulnerability that allows a remote authenticated attacker to upload files with attacker-controlled content to a known location on disk. This vulnerability can be chained with CVE-2026-104935 and…
CISA Known Exploited Vulnerabilities Catalog · 1 day agoOfficial · 98%
CVE-2026-111357 · Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability
Ivanti Connect Secure contains a missing authentication for critical function vulnerability that could allow a local authenticated attacker to escalate their privileges. This vulnerability can be chained with CVE-2026-104935 and CVE-2026-118527. Required action: Apply mitigations in accordance with…
CISA Known Exploited Vulnerabilities Catalog · 1 day agoOfficial · 98%
CVE-2026-97229 · GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability
GitLab Community Edition and Enterprise Edition contain a integer overflow or wraparound vulnerability that could allow an unauthenticated user to execute arbitrary code on the GitLab server via a specially crafted regular expression in a CI/CD configuration, due…
CISA Known Exploited Vulnerabilities Catalog · 2 days agoOfficial · 98%
CVE-2026-76418 · Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability
Cisco Secure Firewall ASA Software and Cisco Secure FTD Software contains an unchecked return value to NULL pointer dereference vulnerability that could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial…
CISA Known Exploited Vulnerabilities Catalog · 2 days ago
Methodology
How to read this theSIGNAL
theSIGNAL surfaces source-attributed information and ranks current items using freshness, severity, observed movement and source confidence where those measurements are available. A high ranking identifies attention or consequence; it does not convert an allegation into a fact or a market price into a guaranteed forecast.
Current feed: CISA. Last successful snapshot: October 31, 2026 7:15 am.
