<?xml version="1.0" encoding="UTF-8"?><urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:news="http://www.google.com/schemas/sitemap-news/0.9"><url><loc>https://patchreview.com/c/vulnerabilities/update-craft-cms-to-5-11-0-to-fix-authenticated/</loc><news:news><news:publication><news:name>Patch Review</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-19T19:56:57Z</news:publication_date><news:title>Update Craft CMS to 5.11.0 to Fix Authenticated Remote Code Execution Flaw</news:title></news:news></url><url><loc>https://patchreview.com/c/vulnerabilities/patch-craft-cms-before-5-11-0-to-stop/</loc><news:news><news:publication><news:name>Patch Review</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-19T19:53:42Z</news:publication_date><news:title>Patch Craft CMS Before 5.11.0 to Stop Authentication Bypass</news:title></news:news></url><url><loc>https://patchreview.com/c/vulnerabilities/secure-ai-agents-with-external-controls-not/</loc><news:news><news:publication><news:name>Patch Review</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-19T17:00:46Z</news:publication_date><news:title>Secure AI Agents With External Controls, Not Internal Prompts, Rapid7 Says</news:title></news:news></url><url><loc>https://patchreview.com/c/vulnerabilities/patch-nocobase-2-2-28-to-block-sql-injection-in/</loc><news:news><news:publication><news:name>Patch Review</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-19T16:47:36Z</news:publication_date><news:title>Patch NocoBase 2.2.28 to Block SQL Injection in Collection Plugin</news:title></news:news></url><url><loc>https://patchreview.com/c/vulnerabilities/update-loopx-to-0-4-5-to-fix-high-severity-data/</loc><news:news><news:publication><news:name>Patch Review</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-19T16:21:26Z</news:publication_date><news:title>Update loopx to 0.4.5 to fix high-severity data leak in serve-status</news:title></news:news></url><url><loc>https://patchreview.com/c/vulnerabilities/patch-sglang-0-5-22-to-block-denial-of-service/</loc><news:news><news:publication><news:name>Patch Review</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-19T14:42:25Z</news:publication_date><news:title>Patch SGLang 0.5.22 to Block Denial of Service via API Request IDs</news:title></news:news></url><url><loc>https://patchreview.com/c/vulnerabilities/upgrade-apache-camel-to-4-23-0-to-fix-high/</loc><news:news><news:publication><news:name>Patch Review</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-19T10:55:21Z</news:publication_date><news:title>Upgrade Apache Camel to 4.23.0 to Fix High-Severity Code Injection Flaw</news:title></news:news></url><url><loc>https://patchreview.com/c/vulnerabilities/plex-users-must-patch-now-to-stop-chained-rce/</loc><news:news><news:publication><news:name>Patch Review</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-19T07:52:30Z</news:publication_date><news:title>Plex Users Must Patch Now to Stop Chained RCE Attacks Installing Cryptominers</news:title></news:news></url><url><loc>https://patchreview.com/c/vulnerabilities/patch-red-hat-enterprise-linux-to-block-unsigned/</loc><news:news><news:publication><news:name>Patch Review</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-19T06:07:24Z</news:publication_date><news:title>Patch Red Hat Enterprise Linux to Block Unsigned Bootc Image Upgrades</news:title></news:news></url><url><loc>https://patchreview.com/c/vulnerabilities/secure-routers-now-unpatched-broadcom-wi-fi-chips/</loc><news:news><news:publication><news:name>Patch Review</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-19T00:54:18Z</news:publication_date><news:title>Secure Routers Now: Unpatched Broadcom Wi-Fi Chips Let Attackers Take Over Without Passwords</news:title></news:news></url><url><loc>https://patchreview.com/c/cyber-attacks/meta-confirms-no-software-flaw-in-github-breach/</loc><news:news><news:publication><news:name>Patch Review</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-18T04:12:46Z</news:publication_date><news:title>Meta confirms no software flaw in GitHub breach affecting 1,500 staff</news:title></news:news></url><url><loc>https://patchreview.com/c/vulnerabilities/update-freertos-plus-tcp-to-v4-4-2-to-fix-ipv6/</loc><news:news><news:publication><news:name>Patch Review</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-17T22:12:16Z</news:publication_date><news:title>Update FreeRTOS-Plus-TCP to V4.4.2 to fix IPv6 and DNS flaws</news:title></news:news></url><url><loc>https://patchreview.com/c/vulnerabilities/update-simple-admin-core-to-block-hard-coded/</loc><news:news><news:publication><news:name>Patch Review</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-17T21:57:20Z</news:publication_date><news:title>Update Simple Admin Core to block hard-coded secret abuse and prevent full system takeover</news:title></news:news></url><url><loc>https://patchreview.com/c/vulnerabilities/langchat-users-must-address-critical-auth-flaw/</loc><news:news><news:publication><news:name>Patch Review</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-17T21:48:17Z</news:publication_date><news:title>LangChat Users Must Address Critical Auth Flaw Exposing API Keys</news:title></news:news></url></urlset>