<?xml version="1.0" encoding="UTF-8"?><urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:news="http://www.google.com/schemas/sitemap-news/0.9"><url><loc>https://firewallchronicle.com/topic/vulnerabilities/cisco-expressway-out-of-bounds-write-flaw-rated/</loc><news:news><news:publication><news:name>Firewall Chronicle</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-21T16:33:54Z</news:publication_date><news:title>Cisco Expressway Out-of-Bounds Write Flaw Rated High Severity</news:title></news:news></url><url><loc>https://firewallchronicle.com/topic/vulnerabilities/pillow-pdf-append-flaw-triggers-recursionerror-in/</loc><news:news><news:publication><news:name>Firewall Chronicle</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-21T09:14:21Z</news:publication_date><news:title>Pillow PDF Append Flaw Triggers RecursionError in Python Services</news:title></news:news></url><url><loc>https://firewallchronicle.com/topic/vulnerabilities/tenda-ac19-web-management-service-exposes/</loc><news:news><news:publication><news:name>Firewall Chronicle</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-21T07:16:37Z</news:publication_date><news:title>Tenda AC19 Web Management Service Exposes Critical Remote Stack Buffer Overflow</news:title></news:news></url><url><loc>https://firewallchronicle.com/topic/vulnerabilities/php-security-team-plans-oct-21-release-for-two-9/</loc><news:news><news:publication><news:name>Firewall Chronicle</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-21T04:29:08Z</news:publication_date><news:title>PHP Security Team Plans Oct 21 Release for Two 9.2 CVSS Vulnerabilities</news:title></news:news></url><url><loc>https://firewallchronicle.com/topic/vulnerabilities/totolink-x2000r-heap-buffer-overflow-in-upload/</loc><news:news><news:publication><news:name>Firewall Chronicle</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-21T03:23:52Z</news:publication_date><news:title>TOTOLINK X2000R Heap Buffer Overflow in Upload Handler Enables Arbitrary Code Execution</news:title></news:news></url><url><loc>https://firewallchronicle.com/topic/vulnerabilities/totolink-x2000r-boa-vpnpassword-stack-overflow/</loc><news:news><news:publication><news:name>Firewall Chronicle</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-21T02:22:56Z</news:publication_date><news:title>TOTOLINK X2000R boa vpnPassword Stack Overflow CVE-2026-9660 RCE</news:title></news:news></url><url><loc>https://firewallchronicle.com/topic/vulnerabilities/trigger-dev-cli-csrf-flaw-in-authorization-flow/</loc><news:news><news:publication><news:name>Firewall Chronicle</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-21T01:42:23Z</news:publication_date><news:title>Trigger.dev CLI CSRF Flaw in Authorization Flow Allows Account Takeover</news:title></news:news></url><url><loc>https://firewallchronicle.com/topic/vulnerabilities/totolink-x2000r-stack-overflow-in-static-dns1/</loc><news:news><news:publication><news:name>Firewall Chronicle</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-21T01:14:54Z</news:publication_date><news:title>Totolink X2000R Stack Overflow in static_dns1 Parameter Allows Authenticated Code Execution</news:title></news:news></url><url><loc>https://firewallchronicle.com/topic/vulnerabilities/wordpress-tinymce-thumbnail-gallery-path/</loc><news:news><news:publication><news:name>Firewall Chronicle</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-20T23:06:29Z</news:publication_date><news:title>WordPress TinyMCE Thumbnail Gallery Path Traversal Exposes Files</news:title></news:news></url><url><loc>https://firewallchronicle.com/topic/vulnerabilities/python-certifi-critical-patch-strips-root/</loc><news:news><news:publication><news:name>Firewall Chronicle</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-20T20:01:06Z</news:publication_date><news:title>Python certifi Critical Patch Strips Root Certificates from Trust Store in Oct 2026 Update</news:title></news:news></url><url><loc>https://firewallchronicle.com/topic/vulnerabilities/adobe-acrobat-for-edge-out-of-bounds-write-allows/</loc><news:news><news:publication><news:name>Firewall Chronicle</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-20T19:10:35Z</news:publication_date><news:title>Adobe Acrobat for Edge Out-of-Bounds Write Allows Remote Code Execution</news:title></news:news></url><url><loc>https://firewallchronicle.com/topic/vulnerabilities/nss-3-131-1-patch-addresses-security-flaw-cve/</loc><news:news><news:publication><news:name>Firewall Chronicle</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-20T18:38:04Z</news:publication_date><news:title>NSS 3.131.1 Patch Addresses Security Flaw CVE-2026-113470 in Mozilla Crypto Library</news:title></news:news></url><url><loc>https://firewallchronicle.com/topic/cloud-security/microsoft-azure-sovereign-ai-design-principles/</loc><news:news><news:publication><news:name>Firewall Chronicle</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-20T11:15:06Z</news:publication_date><news:title>Microsoft Azure Sovereign AI Design Principles Enable Compliant Workloads Across Edge and Cloud Environments</news:title></news:news></url><url><loc>https://firewallchronicle.com/topic/cyber-attacks/mastercard-stablecoin-security-api-lets-banks/</loc><news:news><news:publication><news:name>Firewall Chronicle</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-20T07:17:41Z</news:publication_date><news:title>Mastercard Stablecoin Security API lets banks screen fraud and sanctions before on-chain settlement</news:title></news:news></url><url><loc>https://firewallchronicle.com/topic/vulnerabilities/nginx-heap-buffer-overflows-f5-issues-emergency/</loc><news:news><news:publication><news:name>Firewall Chronicle</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-20T04:24:26Z</news:publication_date><news:title>NGINX Heap Buffer Overflows: F5 Issues Emergency Patches for Critical RCE and DoS Flaws</news:title></news:news></url><url><loc>https://firewallchronicle.com/topic/vulnerabilities/coze-studio-0-5-0-predecessors-exposed-to-command/</loc><news:news><news:publication><news:name>Firewall Chronicle</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-20T01:57:46Z</news:publication_date><news:title>Coze Studio 0.5.0 Predecessors Exposed to Command Injection via Python Nodes</news:title></news:news></url><url><loc>https://firewallchronicle.com/topic/vulnerabilities/coze-studio-idor-cve-2026-77935-enables-cross/</loc><news:news><news:publication><news:name>Firewall Chronicle</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-20T01:53:51Z</news:publication_date><news:title>Coze Studio IDOR CVE-2026-77935 Enables Cross-Tenant Workflow Manipulation Up to v0.5.1</news:title></news:news></url><url><loc>https://firewallchronicle.com/topic/vulnerabilities/h3c-magic-nx15-os-command-injection-in-usrlist/</loc><news:news><news:publication><news:name>Firewall Chronicle</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-20T00:23:26Z</news:publication_date><news:title>H3C Magic NX15 OS Command Injection in usrlist Binary Enables Remote Code Execution With Public Exploit</news:title></news:news></url><url><loc>https://firewallchronicle.com/topic/vulnerabilities/pillow-rank-filter-crash-in-zero-size-images/</loc><news:news><news:publication><news:name>Firewall Chronicle</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-19T23:31:36Z</news:publication_date><news:title>Pillow Rank Filter Crash in Zero-Size Images Fixed in 13.0.0</news:title></news:news></url><url><loc>https://firewallchronicle.com/topic/vulnerabilities/cognition-api-lacks-auth-enables-unauthenticated/</loc><news:news><news:publication><news:name>Firewall Chronicle</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-19T23:12:45Z</news:publication_date><news:title>Cognition API Lacks Auth, Enables Unauthenticated Remote Code Execution</news:title></news:news></url><url><loc>https://firewallchronicle.com/topic/cyber-attacks/rank-math-pro-vulnerability-malicious-updates-re/</loc><news:news><news:publication><news:name>Firewall Chronicle</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-19T22:45:54Z</news:publication_date><news:title>Rank Math PRO Vulnerability: Malicious Updates Re-plant Backdoors on Every Page Visit</news:title></news:news></url></urlset>