https://patchherald.com/c/vulnerabilities/cvss-9-3-unauthenticated-rce-in-werss-1-5-3-via/Patch Heralden2026-10-17T21:58:06ZCVSS 9.3: Unauthenticated RCE in WeRSS 1.5.3 via /rss Endpoint Bypasses Security Filtershttps://patchherald.com/c/vulnerabilities/9-3-cvss-whaticket-community-flaw-grants/Patch Heralden2026-10-17T21:57:20Z9.3 CVSS: WhaTicket Community Flaw Grants Unauthenticated Admin Control Over Tickets and Settingshttps://patchherald.com/c/vulnerabilities/cve-2025-55653-gpac-mp4box-vulnerability-allows/Patch Heralden2026-10-17T20:19:46ZCVE-2025-55653: GPAC MP4Box Vulnerability Allows Crash via Crafted MP4 Fileshttps://patchherald.com/c/vulnerabilities/fleet-before-4-89-0-has-high-severity-crash-flaw/Patch Heralden2026-10-17T19:13:19ZFleet Before 4.89.0 Has High-Severity Crash Flaw CVE-2026-111923https://patchherald.com/c/vulnerabilities/zoneminder-1-38-3-patch-fixes-high-severity/Patch Heralden2026-10-17T18:43:41ZZoneMinder 1.38.3 Patch Fixes High-Severity Command Injection Flawhttps://patchherald.com/c/vulnerabilities/arcane-8-5-flaw-leaks-registry-credentials-before/Patch Heralden2026-10-17T18:23:45ZArcane 8.5 Flaw Leaks Registry Credentials Before Version 2.5.0 Fixhttps://patchherald.com/c/vulnerabilities/critical-icecms-4-1-5-flaw-enables/Patch Heralden2026-10-17T16:29:47ZCritical IceCMS 4.1.5 Flaw Enables Unauthenticated Admin Account Takeoverhttps://patchherald.com/c/cyber-attacks/173-microsoft-365-environments-breached-as/Patch Heralden2026-10-17T16:16:36Z173 Microsoft 365 Environments Breached as Attackers Bypass MFA Using Stolen ConnectWise Keyshttps://patchherald.com/c/vulnerabilities/libreoffice-patch-fixes-cvss-7-8-remote-code/Patch Heralden2026-10-16T18:00:16ZLibreOffice Patch Fixes CVSS 7.8 Remote Code Execution Flawhttps://patchherald.com/c/vulnerabilities/six-linux-kernel-flaws-enable-server-and/Patch Heralden2026-10-16T17:14:37ZSix Linux Kernel Flaws Enable Server and Container Escapeshttps://patchherald.com/c/vulnerabilities/mariadb-patch-fixes-high-severity-proxy-grant/Patch Heralden2026-10-16T16:45:55ZMariaDB Patch Fixes High-Severity Proxy Grant Flaw in Multiple Versionshttps://patchherald.com/c/vulnerabilities/cve-2026-95837-lets-containerd-restore-bypass/Patch Heralden2026-10-16T16:42:26ZCVE-2026-95837 lets containerd restore bypass security policies; update to 2.2.7 or 2.3.4https://patchherald.com/c/vulnerabilities/x-org-server-patch-fixes-local-info-leak-in/Patch Heralden2026-10-16T16:33:43ZX.Org Server Patch Fixes Local Info Leak in Present Extensionhttps://patchherald.com/c/vulnerabilities/high-severity-panic-in-go-markdown-library-cve/Patch Heralden2026-10-16T15:58:03ZHigh-severity panic in Go markdown library CVE-2026-102941 patchedhttps://patchherald.com/c/vulnerabilities/tuxguitar-2-1-0-fixes-high-severity-remote-code/Patch Heralden2026-10-16T15:48:02ZTuxGuitar 2.1.0 Fixes High-Severity Remote Code Execution Flawhttps://patchherald.com/c/cyber-attacks/ai-perfect-grammar-fuels-surge-in-smishing/Patch Heralden2026-10-16T14:51:10ZAI-Perfect Grammar Fuels Surge in Smishing Attacks on 2026 Election Staff via Encrypted Appshttps://patchherald.com/c/vulnerabilities/cvss-8-8-csrf-flaw-affects-athemeart-theme-helper/Patch Heralden2026-10-16T13:38:10ZCVSS 8.8 CSRF Flaw Affects aThemeArt Theme Helper Up To Version 1.0.8https://patchherald.com/c/cyber-attacks/30-water-breaches-ai-theft-tactics-in-mitre-att/Patch Heralden2026-10-16T13:17:23Z30+ Water Breaches & AI Theft Tactics in MITRE ATT&CK v20 Oct 13 Updatehttps://patchherald.com/c/vulnerabilities/cve-2026-76994-patches-hidden-metadata-leak-in/Patch Heralden2026-10-16T09:50:45ZCVE-2026-76994 Patches Hidden Metadata Leak in Apache Answer 2.0.2https://patchherald.com/c/vulnerabilities/moderate-cve-2026-79613-in-apache-answer-exposes/Patch Heralden2026-10-16T09:39:14ZModerate CVE-2026-79613 in Apache Answer Exposes Private Commentshttps://patchherald.com/c/vulnerabilities/cvss-8-8-wp-photo-album-plus-command-injection/Patch Heralden2026-10-16T08:51:26ZCVSS 8.8: WP Photo Album Plus Command Injection Flaw Affects All Versions Up to 9.3.02.002https://patchherald.com/c/vulnerabilities/wordpress-doublescale-crm-plugin-has-high/Patch Heralden2026-10-16T08:45:03ZWordPress DoubleScale CRM Plugin Has High-Severity File Upload Flaw in Versions Up to 1.5.1https://patchherald.com/c/vulnerabilities/high-severity-flaw-in-nginx-ui-allows-bypass-of/Patch Heralden2026-10-16T08:23:45ZHigh-Severity Flaw in Nginx-UI Allows Bypass of Security Controls Before 1.9.10https://patchherald.com/c/vulnerabilities/docker-buildx-patch-fixes-cvss-7-8-remote-code/Patch Heralden2026-10-16T06:47:11ZDocker Buildx Patch Fixes CVSS 7.8 Remote Code Execution Flawhttps://patchherald.com/c/vulnerabilities/wegia-sql-injection-patch-available-for-versions/Patch Heralden2026-10-16T03:11:05ZWeGIA SQL Injection Patch Available for Versions Below 3.8.6https://patchherald.com/c/vulnerabilities/filerise-3-16-0-patch-fixes-high-severity-auth/Patch Heralden2026-10-16T02:59:23ZFileRise 3.16.0 Patch Fixes High-Severity Auth Bypass in Proxy Setupshttps://patchherald.com/c/vulnerabilities/nodemailer-cvss-8-7-flaw-blocks-event-loop-until/Patch Heralden2026-10-16T01:39:25ZNodemailer CVSS 8.7 Flaw Blocks Event Loop Until 10.0.13 Patchhttps://patchherald.com/c/vulnerabilities/eclipse-vert-x-cve-2026-102461-high-severity-dos/Patch Heralden2026-10-15T22:43:54ZEclipse Vert.x CVE-2026-102461: High-Severity DoS in JSON Schema Validation