https://patchgazette.com/news/vulnerabilities/wso2-patches-high-severity-scim-authorization/Patch Gazetteen2026-10-19T17:49:30ZWSO2 Patches High Severity SCIM Authorization Flaw in Identity Server and IAM Productshttps://patchgazette.com/news/vulnerabilities/node-js-follow-redirects-1-16-1-fixes-credential/Patch Gazetteen2026-10-19T17:46:54ZNode.js follow-redirects 1.16.1 Fixes Credential Leakage in CVE-2026-111755https://patchgazette.com/news/vulnerabilities/kvm-x86-smm-cache-flaw-bypasses-write-tracking-no/Patch Gazetteen2026-10-19T16:40:51ZKVM/x86 SMM cache flaw bypasses write tracking; no fix confirmed yethttps://patchgazette.com/news/vulnerabilities/switch-ai-adds-free-tools-to-inventory-agents/Patch Gazetteen2026-10-19T16:26:18ZSwitch AI adds free tools to inventory agents, block injections, and track ROIhttps://patchgazette.com/news/vulnerabilities/drupal-ships-patches-for-critical-rce-flaws-in/Patch Gazetteen2026-10-19T16:04:00ZDrupal Ships Patches for Critical RCE Flaws in Entity List and Field UI Moduleshttps://patchgazette.com/news/vulnerabilities/camunda-7-authorization-flaw-lets-users-steal/Patch Gazetteen2026-10-19T15:43:07ZCamunda 7 Authorization Flaw Lets Users Steal Task Datahttps://patchgazette.com/news/vulnerabilities/yank-note-path-traversal-flaw-exposes-files/Patch Gazetteen2026-10-19T15:05:11ZYank Note Path Traversal Flaw Exposes Files Before Version 3.93.1https://patchgazette.com/news/vulnerabilities/langbot-4-11-0-flaw-lets-attackers-forge-lark/Patch Gazetteen2026-10-19T14:22:27ZLangBot 4.11.0 Flaw Lets Attackers Forge Lark Events Without Authhttps://patchgazette.com/news/vulnerabilities/eg-secure-solutions-patches-siteguard-cve-2026/Patch Gazetteen2026-10-19T13:15:04ZEG Secure Solutions Patches SiteGuard CVE-2026-106931 Command Injection Root Escalation Flawhttps://patchgazette.com/news/vulnerabilities/broadcom-sdk-wps-flaw-enables-unauthenticated-rce/Patch Gazetteen2026-10-19T11:59:14ZBroadcom SDK WPS Flaw Enables Unauthenticated RCE on Routers Without Passwordhttps://patchgazette.com/news/vulnerabilities/xinference-path-traversal-flaw-lets-attackers/Patch Gazetteen2026-10-18T12:46:37ZXinference Path Traversal Flaw Lets Attackers Delete Files on Windowshttps://patchgazette.com/news/vulnerabilities/arraytics-booktics-sql-injection-flaw-rated/Patch Gazetteen2026-10-18T11:39:41ZArraytics Booktics SQL Injection Flaw Rated Critical by NVDhttps://patchgazette.com/news/vulnerabilities/brainstorm-force-ottokit-vulnerability-allows/Patch Gazetteen2026-10-18T11:38:58ZBrainstorm Force OttoKit Vulnerability Allows Critical Privilege Escalation in Versions Up to 1.1.40https://patchgazette.com/news/vulnerabilities/quantumcloud-conversational-forms-cvss-9-8-flaw/Patch Gazetteen2026-10-18T11:36:38ZQuantumCloud Conversational Forms CVSS 9.8 Flaw Enables Object Injection in Versions Up to 1.5.1https://patchgazette.com/news/vulnerabilities/fleet-dm-exposes-memory-exhaustion-flaw-in/Patch Gazetteen2026-10-17T19:11:13ZFleet DM Exposes Memory Exhaustion Flaw in Versions Prior to 4.83.0https://patchgazette.com/news/vulnerabilities/arcane-2-6-0-patches-password-reset-flaw-allowing/Patch Gazetteen2026-10-17T19:00:05ZArcane 2.6.0 Patches Password Reset Flaw Allowing Admin Account Takeover in Prior Versions