https://patchherald.com/c/vulnerabilities/jev-model-flaw-lets-counterfeit-policies-bypass/Patch Heralden2026-10-15T16:31:22ZJev Model Flaw Lets Counterfeit Policies Bypass LangChain Security Gateshttps://patchherald.com/c/vulnerabilities/critical-root-code-execution-flaw-in-solusvm-2/Patch Heralden2026-10-15T15:53:51ZCritical Root Code Execution Flaw in SolusVM 2 Requires Immediate Actionhttps://patchherald.com/c/vulnerabilities/aws-0-0-36-update-blocks-healthomics-mcp-server/Patch Heralden2026-10-15T14:25:04ZAWS 0.0.36 update blocks HealthOmics MCP Server path traversal and arbitrary file writeshttps://patchherald.com/c/vulnerabilities/critical-sql-injection-in-jtl-wms-versions-before/Patch Heralden2026-10-15T14:18:24ZCritical SQL Injection in JTL-WMS Versions Before 2.0.7, 2.1.3, and 2.2.1https://patchherald.com/c/vulnerabilities/tms-amelia-2-4-10-sql-injection-cve-2026-108497/Patch Heralden2026-10-15T14:05:10ZTMS Amelia 2.4.10 SQL Injection (CVE-2026-108497) Lets Attackers Manipulate Databaseshttps://patchherald.com/c/cyber-attacks/2026-election-fbi-alerts-public-to-ai-voice-scams/Patch Heralden2026-10-15T13:48:44Z2026 Election: FBI Alerts Public to AI Voice Scams Impersonating Candidates to Steal Funds and Datahttps://patchherald.com/c/cyber-attacks/1-ivanti-priv-escalation-flaw-unpatched-after-3/Patch Heralden2026-10-15T13:47:13Z1 Ivanti Priv Escalation Flaw Unpatched After 3-Flaw Root Chainhttps://patchherald.com/c/vulnerabilities/citrix-xenserver-and-uniconos-face-security-flaws/Patch Heralden2026-10-15T01:17:20ZCitrix XenServer and UniconOS Face Security Flaws in October Advisorieshttps://patchherald.com/c/vulnerabilities/office-access-heap-overflow-cve-2026-102850/Patch Heralden2026-10-15T01:14:44ZOffice Access Heap Overflow CVE-2026-102850 Enables Network RCE on LTSC and M365 Enterprise Appshttps://patchherald.com/c/vulnerabilities/1-141-1-patch-fixes-high-severity-encoding-error/Patch Heralden2026-10-15T01:14:44Z1.141.1 Patch Fixes High-Severity Encoding Error Allowing Network RCE in Visual Studio Codehttps://patchherald.com/c/vulnerabilities/microsoft-patches-high-severity-visio-heap/Patch Heralden2026-10-15T01:14:44ZMicrosoft Patches High-Severity Visio Heap Overflow CVE-2026-102857https://patchherald.com/c/vulnerabilities/microsoft-patches-cve-2026-102863-high-severity/Patch Heralden2026-10-15T01:14:44ZMicrosoft patches CVE-2026-102863: High-severity SharePoint code injection fixes privilege escalation riskhttps://patchherald.com/c/vulnerabilities/pan-os-10-2-11-1-11-2-patched-for-cve-2026-0319/Patch Heralden2026-10-14T20:39:49ZPAN-OS 10.2, 11.1 & 11.2 patched for CVE-2026-0319 GlobalProtect identity impersonationhttps://patchherald.com/c/vulnerabilities/155-16-5-40-update-fixes-csrf-and-auth-flaws-in/Patch Heralden2026-10-14T20:39:17Z155.16.5.40 update fixes CSRF and auth flaws in Prisma Browser's Chromium enginehttps://patchherald.com/c/vulnerabilities/9-8-cvss-juniper-bgp-buffer-overflow-rce-affects/Patch Heralden2026-10-14T20:25:17Z9.8 CVSS: Juniper BGP Buffer Overflow RCE Affects Junos OS and Evolved Versionshttps://patchherald.com/c/vulnerabilities/cvss-9-8-juniper-junos-bgp-buffer-overflow-risks/Patch Heralden2026-10-14T20:23:34ZCVSS 9.8: Juniper Junos BGP Buffer Overflow Risks DDoS and Router Compromisehttps://patchherald.com/c/vulnerabilities/juniper-srx-users-urged-to-patch-cve-2026-33792/Patch Heralden2026-10-14T20:23:34ZJuniper SRX Users Urged to Patch CVE-2026-33792 srxpfe Stack Buffer Overflow Vulnerabilityhttps://patchherald.com/c/vulnerabilities/microsoft-patches-high-severity-net-wpf-oob-write/Patch Heralden2026-10-14T13:33:36ZMicrosoft Patches High-Severity .NET WPF OOB Write Affecting Versions 8 Through 11 on Windowshttps://patchherald.com/c/vulnerabilities/9-8-cvss-score-frontend-dashboard-3-0-7-has/Patch Heralden2026-10-14T13:33:36Z9.8 CVSS Score: Frontend Dashboard 3.0.7 Has Critical Privilege Escalation Vulnerabilityhttps://patchherald.com/c/cyber-attacks/chrome-136-update-blocks-ghostprofiles-devtools/Patch Heralden2026-10-14T13:11:57ZChrome 136 Update Blocks GhostProfile’s DevTools Remote Control of Cloned macOS Browser Sessionshttps://patchherald.com/c/vulnerabilities/cvss-9-3-adobe-coldfusion-2023-2025-patched-for/Patch Heralden2026-10-14T01:10:14ZCVSS 9.3: Adobe ColdFusion 2023/2025 Patched for Critical Unauthenticated RDS Path Traversalhttps://patchherald.com/c/vulnerabilities/cvss-10-0-cve-2026-48383-grants-unauthenticated/Patch Heralden2026-10-14T01:09:44ZCVSS 10.0: CVE-2026-48383 Grants Unauthenticated RCE on Adobe AEM 6.5 and Cloud Servicehttps://patchherald.com/c/vulnerabilities/cvss-9-6-coldfusion-flaw-lets-low-priv-users/Patch Heralden2026-10-14T01:09:44ZCVSS 9.6 ColdFusion Flaw Lets Low-Priv Users Write Data Without Interactionhttps://patchherald.com/c/vulnerabilities/cvss-9-9-critical-code-injection-flaw-hits-adobe/Patch Heralden2026-10-14T01:09:44ZCVSS 9.9 Critical Code Injection Flaw Hits Adobe ColdFusion 2023 and 2025https://patchherald.com/c/vulnerabilities/1-unpatched-ivanti-flaw-remains-after-cisa-kev/Patch Heralden2026-10-14T01:07:51Z1 Unpatched Ivanti Flaw Remains After CISA KEV Addition; Zero-Chain Grants Roothttps://patchherald.com/c/vulnerabilities/cvss-9-3-critical-stored-xss-in-adobe-commerce/Patch Heralden2026-10-13T20:17:17ZCVSS 9.3: Critical Stored XSS in Adobe Commerce and Magento Allows Session Hijackinghttps://patchherald.com/c/vulnerabilities/cvss-9-8-windows-11-needs-urgent-quic-patches-to/Patch Heralden2026-10-13T20:14:08ZCVSS 9.8: Windows 11 Needs Urgent QUIC Patches to Block Unauthenticated Remote Code Executionhttps://patchherald.com/c/vulnerabilities/microsoft-patches-critical-windows-text-shaping/Patch Heralden2026-10-13T20:14:08ZMicrosoft Patches Critical Windows Text Shaping Flaw With 9.8 CVSS Scorehttps://patchherald.com/c/vulnerabilities/1-500-npm-packages-spared-takeover-as-github/Patch Heralden2026-10-13T20:10:34Z1,500 npm packages spared takeover as GitHub expires unvalidated publishing configs in 48 hours