Microsoft Patch Tuesday November 2026, (Tue, Nov 10th)
2026-11-12T01:23:41Z•f1457e730008af13804476b8ded90fb8867b183aa9a15bd78e58042f0f24ead4
CVE-2023-20198CVE-2026-123158applechromiumcisco-iosexploitation-attemptshoneypotmicrosoftmicrosoft-edgepatch-tuesdaysap-netweaversshssholevulnerability-scanningwebshell
What happened
SANS Internet Storm Center entries from November 2026 report widespread vulnerability activity, including Microsoft’s monthly security updates addressing 1,260 vulnerabilities, 68 rated critical, and 167 Chromium issues in Microsoft Edge. Honeypots observed exploitation attempts targeting SAP NetWeaver webshells, the SSH “sshole” vulnerability (CVE-2026-123158), and an older Cisco IOS vulnerability likely CVE-2023-20198. The feed also references Apple security updates and ongoing vulnerability scanning.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- sans_isc_diary
- Record identifier
- f1457e730008af13804476b8ded90fb8867b183aa9a15bd78e58042f0f24ead4
- Enrichment time
- 2026-11-12T01:23:41Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.