<?xml version="1.0" encoding="UTF-8"?><urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:news="http://www.google.com/schemas/sitemap-news/0.9"><url><loc>https://packettribune.com/topic/vulnerabilities/link-whisper-free-cvss-9-8-deserialization-flaw/</loc><news:news><news:publication><news:name>Packet Tribune</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-15T13:18:36Z</news:publication_date><news:title>Link Whisper Free: CVSS 9.8 Deserialization Flaw in v0.9.7 Demands Immediate Containment Plans</news:title></news:news></url><url><loc>https://packettribune.com/topic/vulnerabilities/qnap-hybriddesk-station-critical-os-command/</loc><news:news><news:publication><news:name>Packet Tribune</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-15T09:54:41Z</news:publication_date><news:title>QNAP HybridDesk Station Critical OS Command Injection CVE-2026-47786 Patched in 4.2.23 and 4.3.4 Branches</news:title></news:news></url><url><loc>https://packettribune.com/topic/cyber-attacks/android-blocks-mobile-fraud-with-ai-enhanced/</loc><news:news><news:publication><news:name>Packet Tribune</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-15T07:28:08Z</news:publication_date><news:title>Android Blocks Mobile Fraud With AI-Enhanced Calls, Texts and Screen Share Protections</news:title></news:news></url><url><loc>https://packettribune.com/topic/vulnerabilities/dockhand-critical-flaw-lets-attackers-reset/</loc><news:news><news:publication><news:name>Packet Tribune</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-15T04:26:34Z</news:publication_date><news:title>Dockhand Critical Flaw Lets Attackers Reset Passwords via API Without Auth in Pre-1.0.45 Versions</news:title></news:news></url><url><loc>https://packettribune.com/topic/vulnerabilities/ad-fs-security-feature-bypass-vulnerability-cve/</loc><news:news><news:publication><news:name>Packet Tribune</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-15T04:16:12Z</news:publication_date><news:title>AD FS Security Feature Bypass Vulnerability CVE-2026-69982 Disclosed</news:title></news:news></url><url><loc>https://packettribune.com/topic/vulnerabilities/databasus-api-flaw-allows-unrestricted-brute/</loc><news:news><news:publication><news:name>Packet Tribune</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-15T00:55:06Z</news:publication_date><news:title>Databasus API Flaw Allows Unrestricted Brute-Force of Password Reset Codes</news:title></news:news></url><url><loc>https://packettribune.com/topic/vulnerabilities/visual-studio-code-output-encoding-error-triggers/</loc><news:news><news:publication><news:name>Packet Tribune</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-14T22:53:40Z</news:publication_date><news:title>Visual Studio Code Output Encoding Error Triggers RCE Threat in Versions Below 1.141.1</news:title></news:news></url><url><loc>https://packettribune.com/topic/vulnerabilities/palo-alto-globalprotect-input-handling-bug-cve/</loc><news:news><news:publication><news:name>Packet Tribune</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-14T20:13:28Z</news:publication_date><news:title>Palo Alto GlobalProtect input handling bug CVE-2026-0319 enables identity impersonation, patches released for PAN-OS</news:title></news:news></url><url><loc>https://packettribune.com/topic/vulnerabilities/palo-alto-cortex-xsoar-os-command-injection-flaw/</loc><news:news><news:publication><news:name>Packet Tribune</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-14T19:35:55Z</news:publication_date><news:title>Palo Alto Cortex XSOAR OS Command Injection Flaw CVE-2026-0313</news:title></news:news></url><url><loc>https://packettribune.com/topic/vulnerabilities/net-uncontrolled-recursion-flaw-cve-2026-58280/</loc><news:news><news:publication><news:name>Packet Tribune</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-14T14:53:36Z</news:publication_date><news:title>.NET Uncontrolled Recursion Flaw CVE-2026-58280 Patches Available</news:title></news:news></url><url><loc>https://packettribune.com/topic/cyber-attacks/watchguard-seo-poisoning-fake-site-harvests-vpn/</loc><news:news><news:publication><news:name>Packet Tribune</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-14T14:17:05Z</news:publication_date><news:title>WatchGuard SEO Poisoning: Fake Site Harvests VPN Logins Before Serving Legitimate Client</news:title></news:news></url><url><loc>https://packettribune.com/topic/cyber-attacks/ivanti-connect-secure-zero-day-chain-grants/</loc><news:news><news:publication><news:name>Packet Tribune</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-14T12:36:45Z</news:publication_date><news:title>Ivanti Connect Secure Zero-Day Chain Grants Unauthenticated Root Access</news:title></news:news></url><url><loc>https://packettribune.com/topic/vulnerabilities/net-pkcs-library-fixes-cpu-exhaustion-bug/</loc><news:news><news:publication><news:name>Packet Tribune</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-14T11:56:44Z</news:publication_date><news:title>.NET Pkcs Library Fixes CPU Exhaustion Bug Triggered by Malformed X.509 Data</news:title></news:news></url><url><loc>https://packettribune.com/topic/vulnerabilities/net-framework-deserialization-flaw-cve-2026-70035/</loc><news:news><news:publication><news:name>Packet Tribune</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-14T11:38:46Z</news:publication_date><news:title>.NET Framework Deserialization Flaw CVE-2026-70035 in WPF Components</news:title></news:news></url><url><loc>https://packettribune.com/topic/vulnerabilities/microsoft-rpc-runtime-library-critical-oob-write/</loc><news:news><news:publication><news:name>Packet Tribune</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-14T02:38:52Z</news:publication_date><news:title>Microsoft RPC Runtime Library Critical OOB Write Vulnerability Enables Remote Code Execution</news:title></news:news></url><url><loc>https://packettribune.com/topic/vulnerabilities/printcart-store-arbitrary-file-upload-flaw/</loc><news:news><news:publication><news:name>Packet Tribune</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-14T02:38:52Z</news:publication_date><news:title>Printcart Store Arbitrary File Upload Flaw Enables Unauthenticated RCE on WooCommerce</news:title></news:news></url><url><loc>https://packettribune.com/topic/vulnerabilities/windows-shell-and-net-framework-microsoft-ships-1/</loc><news:news><news:publication><news:name>Packet Tribune</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-14T00:20:41Z</news:publication_date><news:title>Windows Shell and .NET Framework: Microsoft Ships 1,413 Patches for 3 Zero-Days in October</news:title></news:news></url><url><loc>https://packettribune.com/topic/vulnerabilities/microsoft-failover-cluster-driver-double-free-cve/</loc><news:news><news:publication><news:name>Packet Tribune</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-13T23:48:46Z</news:publication_date><news:title>Microsoft Failover Cluster Driver Double Free CVE-2026-96864 Enables Unauthenticated Remote Code Execution</news:title></news:news></url><url><loc>https://packettribune.com/topic/vulnerabilities/adobe-commerce-template-injection-bug-grants/</loc><news:news><news:publication><news:name>Packet Tribune</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-13T19:18:16Z</news:publication_date><news:title>Adobe Commerce Template Injection Bug Grants Unauthenticated Remote Code Execution on Versions Through 2.4.9</news:title></news:news></url><url><loc>https://packettribune.com/topic/vulnerabilities/sql-injection-in-fortinet-and-metabase-enables/</loc><news:news><news:publication><news:name>Packet Tribune</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-13T18:19:33Z</news:publication_date><news:title>SQL Injection in Fortinet and Metabase Enables Arbitrary File Operations</news:title></news:news></url><url><loc>https://packettribune.com/topic/vulnerabilities/rclone-manager-local-api-flaw-exposes-credentials/</loc><news:news><news:publication><news:name>Packet Tribune</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-13T17:00:31Z</news:publication_date><news:title>RClone Manager Local API Flaw Exposes Credentials to Browser Attacks</news:title></news:news></url></urlset>