CTI THREAT WIRE
[CISA KEV] CVE-2026-19868 SonicWall SonicOS SSL-VPN SAML & MFA Bypass actively exploited in the wild • [CRITICAL RCE] CVE-2026-109618 / CVE-2026-109619 ("PHP2Shell") Out-of-Memory stale worker state RCE affecting PHP < 8.5.12 • [ATTRIBUTION] FBI attributes $6.3B exchange pipeline intrusion to DPRK TraderTraitor (Lazarus Group) • [CISA KEV] CVE-2026-119977 WordPress Core Updater race condition RCE added to Known Exploited Vulnerabilities catalog • [LINUX KERNEL] CVE-2026-98432 IPv4 TCP/MPTCP Use-After-Free remote kernel panic / RCE patch released • [CISA KEV] CVE-2026-19868 SonicWall SonicOS SSL-VPN SAML & MFA Bypass actively exploited in the wild • [CRITICAL RCE] CVE-2026-109618 / CVE-2026-109619 ("PHP2Shell") Out-of-Memory stale worker state RCE affecting PHP < 8.5.12

CTI//FEED

CTI LIVE TELEMETRY & PERSISTENCE

Cyber Threat Intelligence & Vulnerability Intelligence Updated: Nov 8, 2026 08:00 UTC

Tracked High/Crit CVEs

7 +Live Persisted

Active CTI triage queue

CISA KEV Additions (7d)

4 Mandatory Patch

Confirmed in-the-wild exploitation

Zero-Day / RCE Flaws

5 CVSS ≥ 8.1

Unauthenticated & pre-auth vectors

Global Threat Posture

DEFCON 2 // ELEVATED

Edge VPN & PHP worker active hits

Active Vulnerability & Exploit Telemetry

Showing 6 prioritized advisories