https://patchherald.com/c/vulnerabilities/critical-auth-bypass-in-advantech-adam-3600-prior/Patch Heralden2026-10-20T09:13:33ZCritical Auth Bypass in Advantech ADAM-3600 Prior to 2.8.5.0https://patchherald.com/c/vulnerabilities/0-8-2-db-gpt-hardcoded-mysql-root-passwords-grant/Patch Heralden2026-10-20T01:28:48Z0.8.2 DB-GPT: Hardcoded MySQL Root Passwords Grant Attackers Super Privileges via Open Port 3306https://patchherald.com/c/vulnerabilities/4-flaws-chained-in-wild-attacks-on-unpatched-plex/Patch Heralden2026-10-19T23:39:38Z4 Flaws Chained in Wild Attacks on Unpatched Plex Servers Install Cryptominers and Proxy Softwarehttps://patchherald.com/c/vulnerabilities/craft-cms-critical-flaw-lets-tokens-alter-multi/Patch Heralden2026-10-19T22:30:58ZCraft CMS Critical Flaw Lets Tokens Alter Multi-Site Contenthttps://patchherald.com/c/vulnerabilities/15-flaws-in-cpanel-json-xs-perl-module-affect/Patch Heralden2026-10-19T19:03:28Z15 flaws in Cpanel::JSON::XS Perl module affect versions before 4.80https://patchherald.com/c/vulnerabilities/cve-2026-86467-apache-airflow-amazon-provider/Patch Heralden2026-10-19T18:16:57ZCVE-2026-86467: Apache Airflow Amazon provider SAML flaw allows account hijackhttps://patchherald.com/c/vulnerabilities/3-eptura-archibus-flaws-fixed-critical-rce-and/Patch Heralden2026-10-19T17:02:43Z3 Eptura Archibus Flaws Fixed: Critical RCE and Auth Bypass Discovered by Rapid7https://patchherald.com/c/vulnerabilities/crewai-tools-1-15-28-has-high-severity-ssrf-flaw/Patch Heralden2026-10-19T16:47:15Zcrewai-tools 1.15.28 Has High-Severity SSRF Flaw in Selenium Toolhttps://patchherald.com/c/vulnerabilities/high-severity-php-injection-flaw-affects-sqlparse/Patch Heralden2026-10-19T16:26:18ZHigh-Severity PHP Injection Flaw Affects sqlparse Library Through Version 0.6.0https://patchherald.com/c/vulnerabilities/cvss-8-7-flaw-in-picomatch-through-4-0-7-blocks/Patch Heralden2026-10-19T16:08:57ZCVSS 8.7 Flaw in Picomatch Through 4.0.7 Blocks Node.js Event Loopshttps://patchherald.com/c/vulnerabilities/apache-camel-8-2-cvss-ssrf-patch-fixes-as2/Patch Heralden2026-10-19T10:55:21ZApache Camel 8.2 CVSS SSRF Patch Fixes AS2 Componenthttps://patchherald.com/c/vulnerabilities/cve-2026-81376-9-6-score-vs-code-flaw-in-versions/Patch Heralden2026-10-19T08:35:07ZCVE-2026-81376: 9.6-score VS Code flaw in versions before 1.136.2 allows trust bypass via user interactionhttps://patchherald.com/c/cloud-security/3-connectwise-services-offline-oct-18-cloud/Patch Heralden2026-10-19T05:57:23Z3 ConnectWise Services Offline Oct 18: Cloud Backup, SaaS Security, Cloud Management Suspendedhttps://patchherald.com/c/vulnerabilities/cve-2026-111999-vanus-0-9-0-and-below-allow/Patch Heralden2026-10-18T12:34:46ZCVE-2026-111999: Vanus 0.9.0 and Below Allow Unauthenticated Event Injection