https://patchgazette.com/news/vulnerabilities/advantech-adam-3600-login-flaw-rated-critical/Patch Gazetteen2026-10-20T08:50:04ZAdvantech ADAM-3600 Login Flaw Rated Critical, Affects Versions Prior to 2.8.5.0https://patchgazette.com/news/vulnerabilities/ccc-attestation-tls-proof-of-concept-vulnerable/Patch Gazetteen2026-10-20T03:21:48ZCCC Attestation TLS Proof-of-Concept Vulnerable to Relayed Impersonationhttps://patchgazette.com/news/vulnerabilities/opensre-flaw-bypasses-approval-gate-for-shell/Patch Gazetteen2026-10-20T03:01:20ZOpenSRE Flaw Bypasses Approval Gate for Shell Command Executionhttps://patchgazette.com/news/vulnerabilities/grav-cms-critical-flaw-lets-editors-call-static/Patch Gazetteen2026-10-20T02:39:25ZGrav CMS Critical Flaw Lets Editors Call Static Methods Before 2.2.2https://patchgazette.com/news/vulnerabilities/pillow-13-0-0-releases-fix-for-cve-2026-112393/Patch Gazetteen2026-10-20T02:32:15ZPillow 13.0.0 releases fix for CVE-2026-112393 heap overflow in TIFF handlinghttps://patchgazette.com/news/vulnerabilities/asus-router-firmware-vulnerability-allows-local/Patch Gazetteen2026-10-20T02:11:27ZASUS Router Firmware Vulnerability Allows Local Denial of Service Attackhttps://patchgazette.com/news/vulnerabilities/eptura-archibus-users-face-critical-rce-risk/Patch Gazetteen2026-10-20T01:15:54ZEptura Archibus Users Face Critical RCE Risk Before 2025.02 Updatehttps://patchgazette.com/news/vulnerabilities/pillow-13-0-0-patch-fixes-high-severity-crash-in/Patch Gazetteen2026-10-19T22:03:28ZPillow 13.0.0 Patch Fixes High-Severity Crash in Python Imaging Libraryhttps://patchgazette.com/news/vulnerabilities/pillow-13-0-0-patches-high-severity-double-free/Patch Gazetteen2026-10-19T21:53:38ZPillow 13.0.0 patches high-severity double-free flaw in Python imaging libraryhttps://patchgazette.com/news/vulnerabilities/wso2-patches-high-severity-scim-authorization/Patch Gazetteen2026-10-19T17:49:30ZWSO2 Patches High Severity SCIM Authorization Flaw in Identity Server and IAM Productshttps://patchgazette.com/news/vulnerabilities/node-js-follow-redirects-1-16-1-fixes-credential/Patch Gazetteen2026-10-19T17:46:54ZNode.js follow-redirects 1.16.1 Fixes Credential Leakage in CVE-2026-111755https://patchgazette.com/news/vulnerabilities/kvm-x86-smm-cache-flaw-bypasses-write-tracking-no/Patch Gazetteen2026-10-19T16:40:51ZKVM/x86 SMM cache flaw bypasses write tracking; no fix confirmed yethttps://patchgazette.com/news/vulnerabilities/switch-ai-adds-free-tools-to-inventory-agents/Patch Gazetteen2026-10-19T16:26:18ZSwitch AI adds free tools to inventory agents, block injections, and track ROIhttps://patchgazette.com/news/vulnerabilities/drupal-ships-patches-for-critical-rce-flaws-in/Patch Gazetteen2026-10-19T16:04:00ZDrupal Ships Patches for Critical RCE Flaws in Entity List and Field UI Moduleshttps://patchgazette.com/news/vulnerabilities/camunda-7-authorization-flaw-lets-users-steal/Patch Gazetteen2026-10-19T15:43:07ZCamunda 7 Authorization Flaw Lets Users Steal Task Datahttps://patchgazette.com/news/vulnerabilities/yank-note-path-traversal-flaw-exposes-files/Patch Gazetteen2026-10-19T15:05:11ZYank Note Path Traversal Flaw Exposes Files Before Version 3.93.1https://patchgazette.com/news/vulnerabilities/langbot-4-11-0-flaw-lets-attackers-forge-lark/Patch Gazetteen2026-10-19T14:22:27ZLangBot 4.11.0 Flaw Lets Attackers Forge Lark Events Without Authhttps://patchgazette.com/news/vulnerabilities/eg-secure-solutions-patches-siteguard-cve-2026/Patch Gazetteen2026-10-19T13:15:04ZEG Secure Solutions Patches SiteGuard CVE-2026-106931 Command Injection Root Escalation Flawhttps://patchgazette.com/news/vulnerabilities/broadcom-sdk-wps-flaw-enables-unauthenticated-rce/Patch Gazetteen2026-10-19T11:59:14ZBroadcom SDK WPS Flaw Enables Unauthenticated RCE on Routers Without Passwordhttps://patchgazette.com/news/vulnerabilities/xinference-path-traversal-flaw-lets-attackers/Patch Gazetteen2026-10-18T12:46:37ZXinference Path Traversal Flaw Lets Attackers Delete Files on Windowshttps://patchgazette.com/news/vulnerabilities/arraytics-booktics-sql-injection-flaw-rated/Patch Gazetteen2026-10-18T11:39:41ZArraytics Booktics SQL Injection Flaw Rated Critical by NVDhttps://patchgazette.com/news/vulnerabilities/brainstorm-force-ottokit-vulnerability-allows/Patch Gazetteen2026-10-18T11:38:58ZBrainstorm Force OttoKit Vulnerability Allows Critical Privilege Escalation in Versions Up to 1.1.40https://patchgazette.com/news/vulnerabilities/quantumcloud-conversational-forms-cvss-9-8-flaw/Patch Gazetteen2026-10-18T11:36:38ZQuantumCloud Conversational Forms CVSS 9.8 Flaw Enables Object Injection in Versions Up to 1.5.1