<?xml version="1.0" encoding="UTF-8"?><urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:news="http://www.google.com/schemas/sitemap-news/0.9"><url><loc>https://patchgazette.com/news/vulnerabilities/fleet-dm-exposes-memory-exhaustion-flaw-in/</loc><news:news><news:publication><news:name>Patch Gazette</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-17T19:11:13Z</news:publication_date><news:title>Fleet DM Exposes Memory Exhaustion Flaw in Versions Prior to 4.83.0</news:title></news:news></url><url><loc>https://patchgazette.com/news/vulnerabilities/arcane-2-6-0-patches-password-reset-flaw-allowing/</loc><news:news><news:publication><news:name>Patch Gazette</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-17T19:00:05Z</news:publication_date><news:title>Arcane 2.6.0 Patches Password Reset Flaw Allowing Admin Account Takeover in Prior Versions</news:title></news:news></url><url><loc>https://patchgazette.com/news/vulnerabilities/microsoft-october-patch-tuesday-addresses-1-408/</loc><news:news><news:publication><news:name>Patch Gazette</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-17T17:43:31Z</news:publication_date><news:title>Microsoft October Patch Tuesday addresses 1,408 vulnerabilities including exploited flaw</news:title></news:news></url><url><loc>https://patchgazette.com/news/vulnerabilities/elex-helpdesk-plugin-rce-flaw-affects-all/</loc><news:news><news:publication><news:name>Patch Gazette</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-17T16:00:32Z</news:publication_date><news:title>ELEX HelpDesk Plugin RCE Flaw Affects All Versions Through 3.3.7</news:title></news:news></url><url><loc>https://patchgazette.com/news/vulnerabilities/alldata-0-7-1-unauthenticated-jdbc-injection-lets/</loc><news:news><news:publication><news:name>Patch Gazette</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-16T19:42:25Z</news:publication_date><news:title>AllData 0.7.1 Unauthenticated JDBC Injection Lets Attackers Read Files</news:title></news:news></url><url><loc>https://patchgazette.com/news/vulnerabilities/bbs-go-auth-bypass-lets-attackers-impersonate/</loc><news:news><news:publication><news:name>Patch Gazette</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-16T19:21:14Z</news:publication_date><news:title>bbs-go Auth Bypass Lets Attackers Impersonate Users via Google Tokens</news:title></news:news></url><url><loc>https://patchgazette.com/news/vulnerabilities/libreoffice-releases-patch-for-pdf-parsing-remote/</loc><news:news><news:publication><news:name>Patch Gazette</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-16T18:57:41Z</news:publication_date><news:title>LibreOffice Releases Patch for PDF Parsing Remote Code Execution Flaw</news:title></news:news></url><url><loc>https://patchgazette.com/news/vulnerabilities/riot-os-2026-04-fixes-critical-atwinc15x0-buffer/</loc><news:news><news:publication><news:name>Patch Gazette</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-16T17:12:46Z</news:publication_date><news:title>RIOT OS 2026.04 Fixes Critical ATWINC15x0 Buffer Overflow Caused by Malformed SSIDs</news:title></news:news></url><url><loc>https://patchgazette.com/news/vulnerabilities/x-org-server-users-urged-to-patch-heap-overflow/</loc><news:news><news:publication><news:name>Patch Gazette</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-16T16:23:35Z</news:publication_date><news:title>X.Org Server Users Urged to Patch Heap Overflow Allowing Local Root Escalation</news:title></news:news></url><url><loc>https://patchgazette.com/news/vulnerabilities/x-org-server-update-fixes-use-after-free-flaw/</loc><news:news><news:publication><news:name>Patch Gazette</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-16T16:21:31Z</news:publication_date><news:title>X.Org Server Update Fixes Use-After-Free Flaw Leaking Data to Local Attackers</news:title></news:news></url><url><loc>https://patchgazette.com/news/vulnerabilities/unauthenticated-dos-flaw-hits-gocsaf-csaf/</loc><news:news><news:publication><news:name>Patch Gazette</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-16T13:17:23Z</news:publication_date><news:title>Unauthenticated DoS Flaw Hits gocsaf csaf_provider Up to 3.6.0</news:title></news:news></url><url><loc>https://patchgazette.com/news/vulnerabilities/godot-4-x-heap-out-of-bounds-bugs-remain/</loc><news:news><news:publication><news:name>Patch Gazette</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-16T11:13:04Z</news:publication_date><news:title>Godot 4.x heap out-of-bounds bugs remain unpatched despite CVE assignment</news:title></news:news></url><url><loc>https://patchgazette.com/news/vulnerabilities/rdiffweb-patch-fixes-high-severity-privilege/</loc><news:news><news:publication><news:name>Patch Gazette</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-16T11:03:54Z</news:publication_date><news:title>Rdiffweb Patch Fixes High-Severity Privilege Escalation in User API</news:title></news:news></url></urlset>