https://patchherald.com/c/vulnerabilities/high-severity-cve-2026-111805-fixes-available-for/Patch Heralden2026-10-21T19:27:47ZHigh-Severity CVE-2026-111805 Fixes Available for Apache Traffic Serverhttps://patchherald.com/c/vulnerabilities/vaadin-framework-8-32-2-fixes-high-severity/Patch Heralden2026-10-21T18:31:28ZVaadin Framework 8.32.2 Fixes High-Severity Denial of Service Flawhttps://patchherald.com/c/vulnerabilities/virtualenv-21-14-4-fixes-high-severity-command/Patch Heralden2026-10-21T17:58:49Zvirtualenv 21.14.4 Fixes High-Severity Command Injection Flaw for Zsh Usershttps://patchherald.com/c/vulnerabilities/90-of-ai-skills-evade-scanners-creating-blind/Patch Heralden2026-10-21T10:28:28Z90% of AI Skills Evade Scanners, Creating Blind Spots for Credential Theft in JFrog Studyhttps://patchherald.com/c/vulnerabilities/f5-patches-fix-three-critical-nginx-flaws-in-plus/Patch Heralden2026-10-21T09:58:30ZF5 Patches Fix Three Critical NGINX Flaws in Plus and Open Sourcehttps://patchherald.com/c/vulnerabilities/2026-10-19-update-fixes-revoked-emsign-root-in/Patch Heralden2026-10-21T08:31:59Z2026.10.19 Update Fixes Revoked emSign Root in certifi and uv to Block MITMhttps://patchherald.com/c/vulnerabilities/cve-in-argo-cd-2-1-3-6-0-helm-plugin/Patch Heralden2026-10-21T07:46:19ZCVE in Argo CD 2.1-3.6.0: Helm Plugin Vulnerability Allows RCE With Minimal Permissionshttps://patchherald.com/c/vulnerabilities/9-8-cvss-ibm-app-connect-enterprise-13-0-8-2-lets/Patch Heralden2026-10-21T06:58:19Z9.8 CVSS: IBM App Connect Enterprise 13.0.8.2 Lets Attackers Steal Data via Unrestricted Bindinghttps://patchherald.com/c/vulnerabilities/php-patches-two-unconfirmed-9-2-rce-flaws-in-oct/Patch Heralden2026-10-21T06:12:34ZPHP Patches Two Unconfirmed 9.2 RCE Flaws in Oct 21 Update for 8.2-8.5 Brancheshttps://patchherald.com/c/vulnerabilities/two-critical-php-flaws-rated-9-2-get-fix-on/Patch Heralden2026-10-21T04:05:29ZTwo Critical PHP Flaws Rated 9.2 Get Fix on October 21https://patchherald.com/c/vulnerabilities/9-2-cvss-rce-flaws-in-php-5-8-force-urgent/Patch Heralden2026-10-21T02:46:49Z9.2-CVSS RCE flaws in PHP 5-8 force urgent patching before Oct 21 leak deadlinehttps://patchherald.com/c/vulnerabilities/four-plex-media-server-flaws-added-to-federal-kev/Patch Heralden2026-10-20T23:39:49ZFour Plex Media Server Flaws Added to Federal KEV Cataloghttps://patchherald.com/c/vulnerabilities/cve-2026-106931-active-siteguard-command/Patch Heralden2026-10-20T23:17:02ZCVE-2026-106931: Active SiteGuard Command Injection Grants Root Access, Patch Nowhttps://patchherald.com/c/vulnerabilities/aws-kiro-crew-9-9-flaw-lets-whatsapp-users-run/Patch Heralden2026-10-20T21:20:41ZAWS Kiro Crew 9.9 Flaw Lets WhatsApp Users Run Commandshttps://patchherald.com/c/vulnerabilities/high-risk-flaw-in-model-context-protocol-server/Patch Heralden2026-10-20T20:18:48ZHigh-risk flaw in Model Context Protocol server exposes client datahttps://patchherald.com/c/vulnerabilities/wavlink-wl-wn530be1-a-unauthenticated-root/Patch Heralden2026-10-20T19:00:25ZWavlink WL-WN530BE1-A: Unauthenticated Root Command Execution Flaw Lacks Vendor Patchhttps://patchherald.com/c/vulnerabilities/patch-available-for-high-severity-credential-leak/Patch Heralden2026-10-20T18:08:57ZPatch available for high-severity credential leak in npm follow-redirectshttps://patchherald.com/c/vulnerabilities/froxlor-9-4-critical-flaw-lets-users-steal-root/Patch Heralden2026-10-20T17:34:10ZFroxlor 9.4 Critical Flaw Lets Users Steal Root Ownershiphttps://patchherald.com/c/vulnerabilities/patch-apache-couchdb-3-5-3-fixes-authenticated/Patch Heralden2026-10-20T17:32:56ZPatch Apache CouchDB 3.5.3 Fixes Authenticated Denial of Service Flawhttps://patchherald.com/c/vulnerabilities/cve-2026-113703-suggestarr-3-0-0-header-spoofing/Patch Heralden2026-10-20T17:17:44ZCVE-2026-113703: SuggestArr <3.0.0 Header Spoofing Grants Admin Rights Without Credentialshttps://patchherald.com/c/vulnerabilities/critical-cve-2026-106173-patched-fortinet/Patch Heralden2026-10-20T16:56:16ZCritical CVE-2026-106173 Patched: Fortinet FortiSIEM Users Must Update Now to Block Unauthenticated RCE via gRPChttps://patchherald.com/c/vulnerabilities/cve-2026-113391-draytek-vigor2960-patch-fixes/Patch Heralden2026-10-20T14:06:25ZCVE-2026-113391: DrayTek Vigor2960 Patch Fixes Critical RCE Flaw (CVSS 9.4)https://patchherald.com/c/vulnerabilities/booz-allen-tests-show-ai-models-can-move/Patch Heralden2026-10-20T13:33:26ZBooz Allen Tests Show AI Models Can Move Industrial Robots in 16 Minuteshttps://patchherald.com/c/vulnerabilities/critical-command-injection-flaw-found-in/Patch Heralden2026-10-20T13:03:05ZCritical Command Injection Flaw Found in Unsupported DrayTek Vigor2960 Firmwarehttps://patchherald.com/c/vulnerabilities/cvss-9-9-red-hat-strimzi-console-vulnerability/Patch Heralden2026-10-20T11:50:00ZCVSS 9.9: Red Hat Strimzi Console Vulnerability Grants Cluster-Wide Access to Attackershttps://patchherald.com/c/vulnerabilities/unblu-spark-critical-flaw-cve-2026-9589-affects/Patch Heralden2026-10-20T11:33:04ZUnblu Spark Critical Flaw CVE-2026-9589 Affects Versions Before 8.37.0https://patchherald.com/c/vulnerabilities/critical-auth-bypass-in-advantech-adam-3600-prior/Patch Heralden2026-10-20T09:13:33ZCritical Auth Bypass in Advantech ADAM-3600 Prior to 2.8.5.0https://patchherald.com/c/vulnerabilities/0-8-2-db-gpt-hardcoded-mysql-root-passwords-grant/Patch Heralden2026-10-20T01:28:48Z0.8.2 DB-GPT: Hardcoded MySQL Root Passwords Grant Attackers Super Privileges via Open Port 3306https://patchherald.com/c/vulnerabilities/4-flaws-chained-in-wild-attacks-on-unpatched-plex/Patch Heralden2026-10-19T23:39:38Z4 Flaws Chained in Wild Attacks on Unpatched Plex Servers Install Cryptominers and Proxy Softwarehttps://patchherald.com/c/vulnerabilities/craft-cms-critical-flaw-lets-tokens-alter-multi/Patch Heralden2026-10-19T22:30:58ZCraft CMS Critical Flaw Lets Tokens Alter Multi-Site Content