<?xml version="1.0" encoding="UTF-8"?><urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:news="http://www.google.com/schemas/sitemap-news/0.9"><url><loc>https://patchreview.com/c/vulnerabilities/update-nginx-now-f5-patches-critical-remote-code/</loc><news:news><news:publication><news:name>Patch Review</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-21T09:58:30Z</news:publication_date><news:title>Update NGINX Now: F5 Patches Critical Remote Code Execution Flaws</news:title></news:news></url><url><loc>https://patchreview.com/c/vulnerabilities/update-cisco-uic-and-ccx-to-fix-authenticated-sql/</loc><news:news><news:publication><news:name>Patch Review</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-21T09:12:20Z</news:publication_date><news:title>Update Cisco UIC and CCX to fix authenticated SQL injection flaw</news:title></news:news></url><url><loc>https://patchreview.com/c/vulnerabilities/upgrade-mcp-sdk-to-1-32-0-to-block-cross-user/</loc><news:news><news:publication><news:name>Patch Review</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-21T08:56:43Z</news:publication_date><news:title>Upgrade MCP SDK to 1.32.0 to block cross-user task access and privacy leaks in shared stores</news:title></news:news></url><url><loc>https://patchreview.com/c/vulnerabilities/patch-argo-cd-2-1-3-6-0-to-block-rce-via-helm/</loc><news:news><news:publication><news:name>Patch Review</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-21T07:46:19Z</news:publication_date><news:title>Patch Argo CD 2.1-3.6.0 to Block RCE via Helm Plugin Injection With Low Permissions</news:title></news:news></url><url><loc>https://patchreview.com/c/vulnerabilities/patch-php-servers-immediately-for-critical-cve/</loc><news:news><news:publication><news:name>Patch Review</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-21T07:37:48Z</news:publication_date><news:title>Patch PHP Servers Immediately for Critical CVE-2026-109618 and CVE-2026-109619 Flaws</news:title></news:news></url><url><loc>https://patchreview.com/c/vulnerabilities/prepare-php-servers-for-imminent-high-severity/</loc><news:news><news:publication><news:name>Patch Review</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-21T04:13:14Z</news:publication_date><news:title>Prepare PHP servers for imminent high-severity patches on CVE-2026-109618 and CVE-2026-109619</news:title></news:news></url><url><loc>https://patchreview.com/c/vulnerabilities/update-aws-serverless-ci-cd-toolchain-to-v1-0-11/</loc><news:news><news:publication><news:name>Patch Review</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-21T04:12:55Z</news:publication_date><news:title>Update AWS Serverless CI/CD Toolchain to v1.0.11 to Patch Privilege Escalation CVE-2026-112407</news:title></news:news></url><url><loc>https://patchreview.com/c/vulnerabilities/totolink-x2000r-users-urged-to-patch-cvss-9-1/</loc><news:news><news:publication><news:name>Patch Review</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-21T02:56:11Z</news:publication_date><news:title>TOTOLINK X2000R Users Urged to Patch CVSS 9.1 Heap Overflow Vulnerability CVE-2026-10136 Before Exploitation</news:title></news:news></url><url><loc>https://patchreview.com/c/vulnerabilities/secure-totolink-x2000r-routers-against-critical/</loc><news:news><news:publication><news:name>Patch Review</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-21T02:56:11Z</news:publication_date><news:title>Secure TOTOLINK-X2000R Routers Against Critical Remote Code Execution Flaw</news:title></news:news></url><url><loc>https://patchreview.com/c/vulnerabilities/totolink-x2000r-users-must-patch-firmware-to-fix/</loc><news:news><news:publication><news:name>Patch Review</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-21T02:01:20Z</news:publication_date><news:title>TOTOLINK X2000R users must patch firmware to fix critical CVE-2026-9660 buffer overflow flaw</news:title></news:news></url><url><loc>https://patchreview.com/c/vulnerabilities/update-totolink-x2000r-firmware-to-patch/</loc><news:news><news:publication><news:name>Patch Review</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-21T00:47:36Z</news:publication_date><news:title>Update Totolink X2000R Firmware to Patch Authenticated RCE in boa pppoe Handling</news:title></news:news></url><url><loc>https://patchreview.com/c/vulnerabilities/update-totolink-x2000r-routers-to-fix-critical/</loc><news:news><news:publication><news:name>Patch Review</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-21T00:28:21Z</news:publication_date><news:title>Update Totolink X2000R Routers to Fix Critical Remote Code Execution Flaw</news:title></news:news></url><url><loc>https://patchreview.com/c/vulnerabilities/upgrade-mcp-sdk-and-server-to-fix-high-severity/</loc><news:news><news:publication><news:name>Patch Review</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-20T22:08:13Z</news:publication_date><news:title>Upgrade MCP SDK and Server to Fix High-Severity Memory Exhaustion Flaw</news:title></news:news></url><url><loc>https://patchreview.com/c/vulnerabilities/update-totolink-x2000r-firmware-to-fix-critical/</loc><news:news><news:publication><news:name>Patch Review</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-20T21:42:42Z</news:publication_date><news:title>Update Totolink X2000R Firmware to Fix Critical Remote Code Execution Flaw</news:title></news:news></url><url><loc>https://patchreview.com/c/vulnerabilities/isolate-exposed-danfoss-controllers-to-block/</loc><news:news><news:publication><news:name>Patch Review</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-20T21:12:11Z</news:publication_date><news:title>Isolate exposed Danfoss controllers to block remote takeover risks</news:title></news:news></url><url><loc>https://patchreview.com/c/vulnerabilities/update-php-immediately-after-critical-security/</loc><news:news><news:publication><news:name>Patch Review</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-20T20:48:11Z</news:publication_date><news:title>Update PHP Immediately After Critical Security Release Announcement</news:title></news:news></url><url><loc>https://patchreview.com/c/vulnerabilities/patch-couchdb-servers-now-critical-flaw-before-3/</loc><news:news><news:publication><news:name>Patch Review</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-20T17:55:21Z</news:publication_date><news:title>Patch CouchDB Servers Now: Critical Flaw Before 3.5.3 Lets Admins Run Shell Commands</news:title></news:news></url><url><loc>https://patchreview.com/c/vulnerabilities/check-apache-tomcat-fips-configs-for-cve-2026/</loc><news:news><news:publication><news:name>Patch Review</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-20T17:23:46Z</news:publication_date><news:title>Check Apache Tomcat FIPS Configs for CVE-2026-74048 Startup Bypass</news:title></news:news></url><url><loc>https://patchreview.com/c/vulnerabilities/update-curl-now-low-severity-flaws-move-to-public/</loc><news:news><news:publication><news:name>Patch Review</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-20T17:17:58Z</news:publication_date><news:title>Update curl now: Low-severity flaws move to public GitHub from Oct 26</news:title></news:news></url><url><loc>https://patchreview.com/c/vulnerabilities/update-suggestarr-before-3-0-0-to-block-critical/</loc><news:news><news:publication><news:name>Patch Review</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-20T17:17:44Z</news:publication_date><news:title>Update SuggestArr Before 3.0.0 to Block Critical Admin Authentication Bypass</news:title></news:news></url><url><loc>https://patchreview.com/c/vulnerabilities/patch-apache-cocoon-or-retire-it-to-stop-cache/</loc><news:news><news:publication><news:name>Patch Review</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-20T16:41:38Z</news:publication_date><news:title>Patch Apache Cocoon or Retire It to Stop Cache Poisoning Flaw</news:title></news:news></url><url><loc>https://patchreview.com/c/vulnerabilities/upgrade-apache-couchdb-to-3-5-3-to-fix-high/</loc><news:news><news:publication><news:name>Patch Review</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-20T16:19:56Z</news:publication_date><news:title>Upgrade Apache CouchDB to 3.5.3 to Fix High-Severity Authorization Bypass Flaw</news:title></news:news></url><url><loc>https://patchreview.com/c/vulnerabilities/patch-threadx-netx-duo-to-fix-high-severity/</loc><news:news><news:publication><news:name>Patch Review</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-20T15:51:00Z</news:publication_date><news:title>Patch ThreadX NetX Duo to Fix High-Severity Remote Crash in Web Add-On</news:title></news:news></url><url><loc>https://patchreview.com/c/vulnerabilities/upgrade-draytek-vigor2960-to-1-5-1-7-to-block/</loc><news:news><news:publication><news:name>Patch Review</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-20T14:30:10Z</news:publication_date><news:title>Upgrade DrayTek Vigor2960 to 1.5.1.7 to Block Critical Unauthenticated RCE CVE-2026-113390</news:title></news:news></url><url><loc>https://patchreview.com/c/vulnerabilities/red-hat-kafka-users-must-address-auth-bypass-in/</loc><news:news><news:publication><news:name>Patch Review</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-20T11:40:32Z</news:publication_date><news:title>Red Hat Kafka Users Must Address Auth Bypass in Cruise Control</news:title></news:news></url><url><loc>https://patchreview.com/c/vulnerabilities/update-advantech-adam-3600-firmware-to-block-high/</loc><news:news><news:publication><news:name>Patch Review</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-20T09:36:13Z</news:publication_date><news:title>Update Advantech ADAM-3600 firmware to block high-severity file write flaw</news:title></news:news></url><url><loc>https://patchreview.com/c/vulnerabilities/update-ys-infoware-ba-workflow-to-fix-critical/</loc><news:news><news:publication><news:name>Patch Review</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-20T07:42:25Z</news:publication_date><news:title>Update YS-infoware BA-Workflow to fix critical SQL injection flaw</news:title></news:news></url><url><loc>https://patchreview.com/c/vulnerabilities/update-siemens-software-center-to-4-0-9-8-to/</loc><news:news><news:publication><news:name>Patch Review</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-20T07:41:20Z</news:publication_date><news:title>Update Siemens Software Center to 4.0.9.8 to Block ClickFix Malware via CVE-2026-110936</news:title></news:news></url><url><loc>https://patchreview.com/c/vulnerabilities/security-teams-deploy-threatbook-redagents-for/</loc><news:news><news:publication><news:name>Patch Review</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-20T06:54:32Z</news:publication_date><news:title>Security teams deploy ThreatBook RedAgents for parallel multi-agent vulnerability scanning</news:title></news:news></url><url><loc>https://patchreview.com/c/vulnerabilities/check-signal-ringrtc-for-cve-2026-113380-call/</loc><news:news><news:publication><news:name>Patch Review</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-20T05:04:55Z</news:publication_date><news:title>Check Signal RingRTC for CVE-2026-113380 Call Teardown Failure</news:title></news:news></url><url><loc>https://patchreview.com/c/vulnerabilities/mitigate-high-severity-remote-code-execution-in/</loc><news:news><news:publication><news:name>Patch Review</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-20T02:40:01Z</news:publication_date><news:title>Mitigate high-severity remote code execution in JoySafeter 1.0.0</news:title></news:news></url><url><loc>https://patchreview.com/c/vulnerabilities/patch-letta-immediately-default-config-leaves-api/</loc><news:news><news:publication><news:name>Patch Review</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-20T02:11:50Z</news:publication_date><news:title>Patch Letta Immediately: Default Config Leaves API and DB Open to Unauthenticated Remote Code Execution</news:title></news:news></url><url><loc>https://patchreview.com/c/vulnerabilities/fix-piflow-rce-vulnerability-in-versions-2-0-0-2/</loc><news:news><news:publication><news:name>Patch Review</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-20T01:35:09Z</news:publication_date><news:title>Fix Piflow RCE Vulnerability in Versions 2.0.0-2.0.1 to Prevent Unauthenticated Command Execution</news:title></news:news></url><url><loc>https://patchreview.com/c/vulnerabilities/patch-h3c-magic-nx15-now-public-exploit-targets/</loc><news:news><news:publication><news:name>Patch Review</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-20T00:03:48Z</news:publication_date><news:title>Patch H3C Magic NX15 Now: Public Exploit Targets Critical RCE in 100R017 Firmware</news:title></news:news></url><url><loc>https://patchreview.com/c/vulnerabilities/update-camunda-7-immediately-to-block-critical/</loc><news:news><news:publication><news:name>Patch Review</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-19T22:51:15Z</news:publication_date><news:title>Update Camunda 7 Immediately to Block Critical Command Injection Flaw</news:title></news:news></url><url><loc>https://patchreview.com/c/vulnerabilities/update-craft-cms-to-5-11-0-to-fix-authenticated/</loc><news:news><news:publication><news:name>Patch Review</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-19T19:56:57Z</news:publication_date><news:title>Update Craft CMS to 5.11.0 to Fix Authenticated Remote Code Execution Flaw</news:title></news:news></url><url><loc>https://patchreview.com/c/vulnerabilities/patch-craft-cms-before-5-11-0-to-stop/</loc><news:news><news:publication><news:name>Patch Review</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-19T19:53:42Z</news:publication_date><news:title>Patch Craft CMS Before 5.11.0 to Stop Authentication Bypass</news:title></news:news></url></urlset>