<?xml version="1.0" encoding="UTF-8"?><urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:news="http://www.google.com/schemas/sitemap-news/0.9"><url><loc>https://patchgazette.com/news/vulnerabilities/arraytics-booktics-sql-injection-flaw-rated/</loc><news:news><news:publication><news:name>Patch Gazette</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-18T11:39:41Z</news:publication_date><news:title>Arraytics Booktics SQL Injection Flaw Rated Critical by NVD</news:title></news:news></url><url><loc>https://patchgazette.com/news/vulnerabilities/brainstorm-force-ottokit-vulnerability-allows/</loc><news:news><news:publication><news:name>Patch Gazette</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-18T11:38:58Z</news:publication_date><news:title>Brainstorm Force OttoKit Vulnerability Allows Critical Privilege Escalation in Versions Up to 1.1.40</news:title></news:news></url><url><loc>https://patchgazette.com/news/vulnerabilities/quantumcloud-conversational-forms-cvss-9-8-flaw/</loc><news:news><news:publication><news:name>Patch Gazette</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-18T11:36:38Z</news:publication_date><news:title>QuantumCloud Conversational Forms CVSS 9.8 Flaw Enables Object Injection in Versions Up to 1.5.1</news:title></news:news></url><url><loc>https://patchgazette.com/news/vulnerabilities/fleet-dm-exposes-memory-exhaustion-flaw-in/</loc><news:news><news:publication><news:name>Patch Gazette</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-17T19:11:13Z</news:publication_date><news:title>Fleet DM Exposes Memory Exhaustion Flaw in Versions Prior to 4.83.0</news:title></news:news></url><url><loc>https://patchgazette.com/news/vulnerabilities/arcane-2-6-0-patches-password-reset-flaw-allowing/</loc><news:news><news:publication><news:name>Patch Gazette</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-17T19:00:05Z</news:publication_date><news:title>Arcane 2.6.0 Patches Password Reset Flaw Allowing Admin Account Takeover in Prior Versions</news:title></news:news></url><url><loc>https://patchgazette.com/news/vulnerabilities/microsoft-october-patch-tuesday-addresses-1-408/</loc><news:news><news:publication><news:name>Patch Gazette</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-17T17:43:31Z</news:publication_date><news:title>Microsoft October Patch Tuesday addresses 1,408 vulnerabilities including exploited flaw</news:title></news:news></url><url><loc>https://patchgazette.com/news/vulnerabilities/elex-helpdesk-plugin-rce-flaw-affects-all/</loc><news:news><news:publication><news:name>Patch Gazette</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-17T16:00:32Z</news:publication_date><news:title>ELEX HelpDesk Plugin RCE Flaw Affects All Versions Through 3.3.7</news:title></news:news></url><url><loc>https://patchgazette.com/news/vulnerabilities/alldata-0-7-1-unauthenticated-jdbc-injection-lets/</loc><news:news><news:publication><news:name>Patch Gazette</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-16T19:42:25Z</news:publication_date><news:title>AllData 0.7.1 Unauthenticated JDBC Injection Lets Attackers Read Files</news:title></news:news></url><url><loc>https://patchgazette.com/news/vulnerabilities/bbs-go-auth-bypass-lets-attackers-impersonate/</loc><news:news><news:publication><news:name>Patch Gazette</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-16T19:21:14Z</news:publication_date><news:title>bbs-go Auth Bypass Lets Attackers Impersonate Users via Google Tokens</news:title></news:news></url><url><loc>https://patchgazette.com/news/vulnerabilities/libreoffice-releases-patch-for-pdf-parsing-remote/</loc><news:news><news:publication><news:name>Patch Gazette</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-16T18:57:41Z</news:publication_date><news:title>LibreOffice Releases Patch for PDF Parsing Remote Code Execution Flaw</news:title></news:news></url><url><loc>https://patchgazette.com/news/vulnerabilities/riot-os-2026-04-fixes-critical-atwinc15x0-buffer/</loc><news:news><news:publication><news:name>Patch Gazette</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-16T17:12:46Z</news:publication_date><news:title>RIOT OS 2026.04 Fixes Critical ATWINC15x0 Buffer Overflow Caused by Malformed SSIDs</news:title></news:news></url><url><loc>https://patchgazette.com/news/vulnerabilities/x-org-server-users-urged-to-patch-heap-overflow/</loc><news:news><news:publication><news:name>Patch Gazette</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-16T16:23:35Z</news:publication_date><news:title>X.Org Server Users Urged to Patch Heap Overflow Allowing Local Root Escalation</news:title></news:news></url><url><loc>https://patchgazette.com/news/vulnerabilities/x-org-server-update-fixes-use-after-free-flaw/</loc><news:news><news:publication><news:name>Patch Gazette</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-16T16:21:31Z</news:publication_date><news:title>X.Org Server Update Fixes Use-After-Free Flaw Leaking Data to Local Attackers</news:title></news:news></url><url><loc>https://patchgazette.com/news/vulnerabilities/unauthenticated-dos-flaw-hits-gocsaf-csaf/</loc><news:news><news:publication><news:name>Patch Gazette</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-16T13:17:23Z</news:publication_date><news:title>Unauthenticated DoS Flaw Hits gocsaf csaf_provider Up to 3.6.0</news:title></news:news></url></urlset>