<?xml version="1.0" encoding="UTF-8"?><urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:news="http://www.google.com/schemas/sitemap-news/0.9"><url><loc>https://firewallchronicle.com/topic/vulnerabilities/weaver-e-cology-sql-injection-flaw-exposes/</loc><news:news><news:publication><news:name>Firewall Chronicle</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-22T12:18:00Z</news:publication_date><news:title>Weaver E-cology SQL Injection Flaw Exposes Unauthenticated Data Extraction</news:title></news:news></url><url><loc>https://firewallchronicle.com/topic/vulnerabilities/node-js-brotli-decompression-bug-enables-remote/</loc><news:news><news:publication><news:name>Firewall Chronicle</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-22T09:33:04Z</news:publication_date><news:title>Node.js Brotli Decompression Bug Enables Remote Code Execution Risks</news:title></news:news></url><url><loc>https://firewallchronicle.com/topic/vulnerabilities/opensearch-sql-plugin-cve-2026-83497-rce-via/</loc><news:news><news:publication><news:name>Firewall Chronicle</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-22T06:03:28Z</news:publication_date><news:title>OpenSearch SQL Plugin CVE-2026-83497: RCE via Crafted Cursors in Affected Versions</news:title></news:news></url><url><loc>https://firewallchronicle.com/topic/vulnerabilities/oracle-siebel-crm-cloud-manager-critical-http/</loc><news:news><news:publication><news:name>Firewall Chronicle</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-22T05:29:35Z</news:publication_date><news:title>Oracle Siebel CRM Cloud Manager Critical HTTP Flaw Lets Low-Priv Users Seize Control</news:title></news:news></url><url><loc>https://firewallchronicle.com/topic/vulnerabilities/oracle-soa-suite-fabric-layer-face/</loc><news:news><news:publication><news:name>Firewall Chronicle</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-22T04:53:13Z</news:publication_date><news:title>Oracle SOA Suite Fabric Layer Face Unauthenticated Remote Code Execution Risk</news:title></news:news></url><url><loc>https://firewallchronicle.com/topic/vulnerabilities/oracle-soa-suite-takeover-vulnerability-cve-2026/</loc><news:news><news:publication><news:name>Firewall Chronicle</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-22T04:37:25Z</news:publication_date><news:title>Oracle SOA Suite Takeover Vulnerability CVE-2026-91224</news:title></news:news></url><url><loc>https://firewallchronicle.com/topic/vulnerabilities/oracle-soa-suite-cve-2026-91230-critical-http/</loc><news:news><news:publication><news:name>Firewall Chronicle</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-22T04:21:24Z</news:publication_date><news:title>Oracle SOA Suite CVE-2026-91230 Critical HTTP Flaw Compromises Fabric Layer Data</news:title></news:news></url><url><loc>https://firewallchronicle.com/topic/vulnerabilities/oracle-identity-manager-connector-cve-2026-91490/</loc><news:news><news:publication><news:name>Firewall Chronicle</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-22T03:58:28Z</news:publication_date><news:title>Oracle Identity Manager Connector CVE-2026-91490: Critical LDAP Gateway Vuln Allows Full Data Manipulation</news:title></news:news></url><url><loc>https://firewallchronicle.com/topic/vulnerabilities/oracle-essbase-21-8-3-0-0-exposed-to/</loc><news:news><news:publication><news:name>Firewall Chronicle</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-22T03:41:35Z</news:publication_date><news:title>Oracle Essbase 21.8.3.0.0 Exposed to Unauthenticated Data Manipulation</news:title></news:news></url><url><loc>https://firewallchronicle.com/topic/vulnerabilities/jupyter-nbconvert-path-traversal-allows-arbitrary/</loc><news:news><news:publication><news:name>Firewall Chronicle</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-21T21:09:40Z</news:publication_date><news:title>Jupyter nbconvert path traversal allows arbitrary file writes</news:title></news:news></url><url><loc>https://firewallchronicle.com/topic/vulnerabilities/prototype-pollution-in-toml-node-allows-remote/</loc><news:news><news:publication><news:name>Firewall Chronicle</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-21T21:05:38Z</news:publication_date><news:title>Prototype Pollution in toml-node Allows Remote Object Corruption</news:title></news:news></url><url><loc>https://firewallchronicle.com/topic/vulnerabilities/cisco-expressway-out-of-bounds-write-flaw-rated/</loc><news:news><news:publication><news:name>Firewall Chronicle</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-21T16:33:54Z</news:publication_date><news:title>Cisco Expressway Out-of-Bounds Write Flaw Rated High Severity</news:title></news:news></url><url><loc>https://firewallchronicle.com/topic/vulnerabilities/pillow-pdf-append-flaw-triggers-recursionerror-in/</loc><news:news><news:publication><news:name>Firewall Chronicle</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-21T09:14:21Z</news:publication_date><news:title>Pillow PDF Append Flaw Triggers RecursionError in Python Services</news:title></news:news></url><url><loc>https://firewallchronicle.com/topic/vulnerabilities/tenda-ac19-web-management-service-exposes/</loc><news:news><news:publication><news:name>Firewall Chronicle</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-21T07:16:37Z</news:publication_date><news:title>Tenda AC19 Web Management Service Exposes Critical Remote Stack Buffer Overflow</news:title></news:news></url><url><loc>https://firewallchronicle.com/topic/vulnerabilities/php-security-team-plans-oct-21-release-for-two-9/</loc><news:news><news:publication><news:name>Firewall Chronicle</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-21T04:29:08Z</news:publication_date><news:title>PHP Security Team Plans Oct 21 Release for Two 9.2 CVSS Vulnerabilities</news:title></news:news></url><url><loc>https://firewallchronicle.com/topic/vulnerabilities/totolink-x2000r-heap-buffer-overflow-in-upload/</loc><news:news><news:publication><news:name>Firewall Chronicle</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-21T03:23:52Z</news:publication_date><news:title>TOTOLINK X2000R Heap Buffer Overflow in Upload Handler Enables Arbitrary Code Execution</news:title></news:news></url><url><loc>https://firewallchronicle.com/topic/vulnerabilities/totolink-x2000r-boa-vpnpassword-stack-overflow/</loc><news:news><news:publication><news:name>Firewall Chronicle</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-21T02:22:56Z</news:publication_date><news:title>TOTOLINK X2000R boa vpnPassword Stack Overflow CVE-2026-9660 RCE</news:title></news:news></url><url><loc>https://firewallchronicle.com/topic/vulnerabilities/trigger-dev-cli-csrf-flaw-in-authorization-flow/</loc><news:news><news:publication><news:name>Firewall Chronicle</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-21T01:42:23Z</news:publication_date><news:title>Trigger.dev CLI CSRF Flaw in Authorization Flow Allows Account Takeover</news:title></news:news></url><url><loc>https://firewallchronicle.com/topic/vulnerabilities/totolink-x2000r-stack-overflow-in-static-dns1/</loc><news:news><news:publication><news:name>Firewall Chronicle</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-21T01:14:54Z</news:publication_date><news:title>Totolink X2000R Stack Overflow in static_dns1 Parameter Allows Authenticated Code Execution</news:title></news:news></url><url><loc>https://firewallchronicle.com/topic/vulnerabilities/wordpress-tinymce-thumbnail-gallery-path/</loc><news:news><news:publication><news:name>Firewall Chronicle</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-20T23:06:29Z</news:publication_date><news:title>WordPress TinyMCE Thumbnail Gallery Path Traversal Exposes Files</news:title></news:news></url><url><loc>https://firewallchronicle.com/topic/vulnerabilities/python-certifi-critical-patch-strips-root/</loc><news:news><news:publication><news:name>Firewall Chronicle</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-20T20:01:06Z</news:publication_date><news:title>Python certifi Critical Patch Strips Root Certificates from Trust Store in Oct 2026 Update</news:title></news:news></url><url><loc>https://firewallchronicle.com/topic/vulnerabilities/adobe-acrobat-for-edge-out-of-bounds-write-allows/</loc><news:news><news:publication><news:name>Firewall Chronicle</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-20T19:10:35Z</news:publication_date><news:title>Adobe Acrobat for Edge Out-of-Bounds Write Allows Remote Code Execution</news:title></news:news></url><url><loc>https://firewallchronicle.com/topic/vulnerabilities/nss-3-131-1-patch-addresses-security-flaw-cve/</loc><news:news><news:publication><news:name>Firewall Chronicle</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-20T18:38:04Z</news:publication_date><news:title>NSS 3.131.1 Patch Addresses Security Flaw CVE-2026-113470 in Mozilla Crypto Library</news:title></news:news></url></urlset>