https://patchherald.com/c/vulnerabilities/craft-cms-critical-flaw-lets-tokens-alter-multi/Patch Heralden2026-10-19T22:30:58ZCraft CMS Critical Flaw Lets Tokens Alter Multi-Site Contenthttps://patchherald.com/c/vulnerabilities/15-flaws-in-cpanel-json-xs-perl-module-affect/Patch Heralden2026-10-19T19:03:28Z15 flaws in Cpanel::JSON::XS Perl module affect versions before 4.80https://patchherald.com/c/vulnerabilities/cve-2026-86467-apache-airflow-amazon-provider/Patch Heralden2026-10-19T18:16:57ZCVE-2026-86467: Apache Airflow Amazon provider SAML flaw allows account hijackhttps://patchherald.com/c/vulnerabilities/3-eptura-archibus-flaws-fixed-critical-rce-and/Patch Heralden2026-10-19T17:02:43Z3 Eptura Archibus Flaws Fixed: Critical RCE and Auth Bypass Discovered by Rapid7https://patchherald.com/c/vulnerabilities/crewai-tools-1-15-28-has-high-severity-ssrf-flaw/Patch Heralden2026-10-19T16:47:15Zcrewai-tools 1.15.28 Has High-Severity SSRF Flaw in Selenium Toolhttps://patchherald.com/c/vulnerabilities/high-severity-php-injection-flaw-affects-sqlparse/Patch Heralden2026-10-19T16:26:18ZHigh-Severity PHP Injection Flaw Affects sqlparse Library Through Version 0.6.0https://patchherald.com/c/vulnerabilities/cvss-8-7-flaw-in-picomatch-through-4-0-7-blocks/Patch Heralden2026-10-19T16:08:57ZCVSS 8.7 Flaw in Picomatch Through 4.0.7 Blocks Node.js Event Loopshttps://patchherald.com/c/vulnerabilities/apache-camel-8-2-cvss-ssrf-patch-fixes-as2/Patch Heralden2026-10-19T10:55:21ZApache Camel 8.2 CVSS SSRF Patch Fixes AS2 Componenthttps://patchherald.com/c/vulnerabilities/cve-2026-81376-9-6-score-vs-code-flaw-in-versions/Patch Heralden2026-10-19T08:35:07ZCVE-2026-81376: 9.6-score VS Code flaw in versions before 1.136.2 allows trust bypass via user interactionhttps://patchherald.com/c/cloud-security/3-connectwise-services-offline-oct-18-cloud/Patch Heralden2026-10-19T05:57:23Z3 ConnectWise Services Offline Oct 18: Cloud Backup, SaaS Security, Cloud Management Suspendedhttps://patchherald.com/c/vulnerabilities/cve-2026-111999-vanus-0-9-0-and-below-allow/Patch Heralden2026-10-18T12:34:46ZCVE-2026-111999: Vanus 0.9.0 and Below Allow Unauthenticated Event Injectionhttps://patchherald.com/c/cyber-attacks/1-0-3-imgdecode-npm-package-hosts-hidden/Patch Heralden2026-10-18T03:45:10Z1.0.3 imgdecode npm package hosts hidden shellcode loader, 979 downloads, still online