https://patchreview.com/c/vulnerabilities/update-agent-zero-web-ui-to-1-15-to-block-high/Patch Reviewen2026-10-22T18:11:09ZUpdate Agent Zero Web UI to 1.15 to block high-severity cross-site scripting flawhttps://patchreview.com/c/vulnerabilities/update-dompurify-npm-package-to-3-4-17-to-fix/Patch Reviewen2026-10-22T16:59:33ZUpdate dompurify npm package to 3.4.17 to fix high severity sanitization bypasshttps://patchreview.com/c/vulnerabilities/update-graphql-tools-utils-to-12-0-2-to-fix-high/Patch Reviewen2026-10-22T16:54:29ZUpdate GraphQL Tools Utils to 12.0.2 to Fix High Severity Prototype Pollution Flawhttps://patchreview.com/c/vulnerabilities/patch-npm-toml-to-5-0-1-to-fix-high-severity/Patch Reviewen2026-10-22T16:54:29ZPatch npm toml to 5.0.1 to fix high-severity denial-of-service flawhttps://patchreview.com/c/vulnerabilities/patch-pyjwt-2-13-0-to-stop-empty-key-token/Patch Reviewen2026-10-22T16:20:19ZPatch PyJWT 2.13.0 to Stop Empty Key Token Forgery Attackshttps://patchreview.com/c/vulnerabilities/patch-next-js-15-5-28-and-16-4-1-to-stop-cpu/Patch Reviewen2026-10-22T15:45:41ZPatch Next.js 15.5.28 and 16.4.1 to Stop CPU Exhaustion Attackshttps://patchreview.com/c/vulnerabilities/patch-wordpress-notificationx-plugin-to-fix-high/Patch Reviewen2026-10-22T13:29:26ZPatch WordPress NotificationX Plugin to Fix High-Severity SQL Injection Flawhttps://patchreview.com/c/vulnerabilities/patch-php-now-major-sites-offline-as/Patch Reviewen2026-10-22T13:16:09ZPatch PHP Now: Major Sites Offline as Vulnerability Hits Web Infrastructurehttps://patchreview.com/c/vulnerabilities/update-perl-dbi-to-1-656-to-prevent-application/Patch Reviewen2026-10-22T00:37:43ZUpdate Perl DBI to 1.656 to Prevent Application Hangs from Lock Failureshttps://patchreview.com/c/vulnerabilities/patch-ibm-planning-analytics-2-0-and-2-1-for-high/Patch Reviewen2026-10-22T00:34:37ZPatch IBM Planning Analytics 2.0 and 2.1 for High-Severity Buffer Overflowhttps://patchreview.com/c/vulnerabilities/update-gitlab-to-19-3-6-19-4-3-or-19-5-1-to-block/Patch Reviewen2026-10-21T23:51:44ZUpdate GitLab to 19.3.6, 19.4.3 or 19.5.1 to block account takeoverhttps://patchreview.com/c/vulnerabilities/audit-perl-robots-validate-modules-before-version/Patch Reviewen2026-10-21T22:36:00ZAudit Perl Robots-Validate Modules Before Version 0.4.10 for Imposter Riskhttps://patchreview.com/c/vulnerabilities/update-perl-imager-file-gif-to-1-006-to-fix-out/Patch Reviewen2026-10-21T22:10:41ZUpdate Perl Imager-File-GIF to 1.006 to fix out-of-bounds read flawhttps://patchreview.com/c/vulnerabilities/mitigate-tastyigniter-4-4-5-admin-code-execution/Patch Reviewen2026-10-21T21:44:22ZMitigate TastyIgniter 4.4.5 Admin Code Execution Flawhttps://patchreview.com/c/vulnerabilities/upgrade-wp-time-capsule-to-1-22-28-to-prevent/Patch Reviewen2026-10-21T21:26:20ZUpgrade WP Time Capsule to 1.22.28 to Prevent Authenticated Users from Overwriting Live Site Databaseshttps://patchreview.com/c/vulnerabilities/patch-unbound-1-26-2-now-to-stop-use-after-free/Patch Reviewen2026-10-21T19:33:46ZPatch Unbound 1.26.2 now to stop use-after-free crash in DoQ path migration for multi-threaded setupshttps://patchreview.com/c/vulnerabilities/secure-hmailserver-6-3-6-against-authenticated/Patch Reviewen2026-10-21T19:32:50ZSecure hMailServer 6.3.6 against authenticated mail routing hijackhttps://patchreview.com/c/vulnerabilities/patch-apache-pulsar-shadow-topics-flaw-cve-2026/Patch Reviewen2026-10-21T18:38:28ZPatch Apache Pulsar Shadow Topics Flaw CVE-2026-105937 in 4.0.x and 4.2.xhttps://patchreview.com/c/vulnerabilities/patch-apache-traffic-server-to-fix-high-severity/Patch Reviewen2026-10-21T18:35:26ZPatch Apache Traffic Server to Fix High-Severity Request Smuggling Flawhttps://patchreview.com/c/vulnerabilities/update-nginx-now-f5-patches-critical-remote-code/Patch Reviewen2026-10-21T09:58:30ZUpdate NGINX Now: F5 Patches Critical Remote Code Execution Flawshttps://patchreview.com/c/vulnerabilities/update-cisco-uic-and-ccx-to-fix-authenticated-sql/Patch Reviewen2026-10-21T09:12:20ZUpdate Cisco UIC and CCX to fix authenticated SQL injection flawhttps://patchreview.com/c/vulnerabilities/upgrade-mcp-sdk-to-1-32-0-to-block-cross-user/Patch Reviewen2026-10-21T08:56:43ZUpgrade MCP SDK to 1.32.0 to block cross-user task access and privacy leaks in shared storeshttps://patchreview.com/c/vulnerabilities/patch-argo-cd-2-1-3-6-0-to-block-rce-via-helm/Patch Reviewen2026-10-21T07:46:19ZPatch Argo CD 2.1-3.6.0 to Block RCE via Helm Plugin Injection With Low Permissionshttps://patchreview.com/c/vulnerabilities/patch-php-servers-immediately-for-critical-cve/Patch Reviewen2026-10-21T07:37:48ZPatch PHP Servers Immediately for Critical CVE-2026-109618 and CVE-2026-109619 Flawshttps://patchreview.com/c/vulnerabilities/prepare-php-servers-for-imminent-high-severity/Patch Reviewen2026-10-21T04:13:14ZPrepare PHP servers for imminent high-severity patches on CVE-2026-109618 and CVE-2026-109619https://patchreview.com/c/vulnerabilities/update-aws-serverless-ci-cd-toolchain-to-v1-0-11/Patch Reviewen2026-10-21T04:12:55ZUpdate AWS Serverless CI/CD Toolchain to v1.0.11 to Patch Privilege Escalation CVE-2026-112407https://patchreview.com/c/vulnerabilities/totolink-x2000r-users-urged-to-patch-cvss-9-1/Patch Reviewen2026-10-21T02:56:11ZTOTOLINK X2000R Users Urged to Patch CVSS 9.1 Heap Overflow Vulnerability CVE-2026-10136 Before Exploitationhttps://patchreview.com/c/vulnerabilities/secure-totolink-x2000r-routers-against-critical/Patch Reviewen2026-10-21T02:56:11ZSecure TOTOLINK-X2000R Routers Against Critical Remote Code Execution Flawhttps://patchreview.com/c/vulnerabilities/totolink-x2000r-users-must-patch-firmware-to-fix/Patch Reviewen2026-10-21T02:01:20ZTOTOLINK X2000R users must patch firmware to fix critical CVE-2026-9660 buffer overflow flawhttps://patchreview.com/c/vulnerabilities/update-totolink-x2000r-firmware-to-patch/Patch Reviewen2026-10-21T00:47:36ZUpdate Totolink X2000R Firmware to Patch Authenticated RCE in boa pppoe Handlinghttps://patchreview.com/c/vulnerabilities/update-totolink-x2000r-routers-to-fix-critical/Patch Reviewen2026-10-21T00:28:21ZUpdate Totolink X2000R Routers to Fix Critical Remote Code Execution Flawhttps://patchreview.com/c/vulnerabilities/upgrade-mcp-sdk-and-server-to-fix-high-severity/Patch Reviewen2026-10-20T22:08:13ZUpgrade MCP SDK and Server to Fix High-Severity Memory Exhaustion Flawhttps://patchreview.com/c/vulnerabilities/update-totolink-x2000r-firmware-to-fix-critical/Patch Reviewen2026-10-20T21:42:42ZUpdate Totolink X2000R Firmware to Fix Critical Remote Code Execution Flawhttps://patchreview.com/c/vulnerabilities/isolate-exposed-danfoss-controllers-to-block/Patch Reviewen2026-10-20T21:12:11ZIsolate exposed Danfoss controllers to block remote takeover riskshttps://patchreview.com/c/vulnerabilities/update-php-immediately-after-critical-security/Patch Reviewen2026-10-20T20:48:11ZUpdate PHP Immediately After Critical Security Release Announcement