https://patchherald.com/c/vulnerabilities/cve-2026-111999-vanus-0-9-0-and-below-allow/Patch Heralden2026-10-18T12:34:46ZCVE-2026-111999: Vanus 0.9.0 and Below Allow Unauthenticated Event Injectionhttps://patchherald.com/c/cyber-attacks/1-0-3-imgdecode-npm-package-hosts-hidden/Patch Heralden2026-10-18T03:45:10Z1.0.3 imgdecode npm package hosts hidden shellcode loader, 979 downloads, still onlinehttps://patchherald.com/c/vulnerabilities/cvss-9-3-unauthenticated-rce-in-werss-1-5-3-via/Patch Heralden2026-10-17T21:58:06ZCVSS 9.3: Unauthenticated RCE in WeRSS 1.5.3 via /rss Endpoint Bypasses Security Filtershttps://patchherald.com/c/vulnerabilities/9-3-cvss-whaticket-community-flaw-grants/Patch Heralden2026-10-17T21:57:20Z9.3 CVSS: WhaTicket Community Flaw Grants Unauthenticated Admin Control Over Tickets and Settingshttps://patchherald.com/c/vulnerabilities/cve-2025-55653-gpac-mp4box-vulnerability-allows/Patch Heralden2026-10-17T20:19:46ZCVE-2025-55653: GPAC MP4Box Vulnerability Allows Crash via Crafted MP4 Fileshttps://patchherald.com/c/vulnerabilities/fleet-before-4-89-0-has-high-severity-crash-flaw/Patch Heralden2026-10-17T19:13:19ZFleet Before 4.89.0 Has High-Severity Crash Flaw CVE-2026-111923https://patchherald.com/c/vulnerabilities/zoneminder-1-38-3-patch-fixes-high-severity/Patch Heralden2026-10-17T18:43:41ZZoneMinder 1.38.3 Patch Fixes High-Severity Command Injection Flawhttps://patchherald.com/c/vulnerabilities/arcane-8-5-flaw-leaks-registry-credentials-before/Patch Heralden2026-10-17T18:23:45ZArcane 8.5 Flaw Leaks Registry Credentials Before Version 2.5.0 Fixhttps://patchherald.com/c/vulnerabilities/critical-icecms-4-1-5-flaw-enables/Patch Heralden2026-10-17T16:29:47ZCritical IceCMS 4.1.5 Flaw Enables Unauthenticated Admin Account Takeoverhttps://patchherald.com/c/cyber-attacks/173-microsoft-365-environments-breached-as/Patch Heralden2026-10-17T16:16:36Z173 Microsoft 365 Environments Breached as Attackers Bypass MFA Using Stolen ConnectWise Keys