<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:news="http://www.google.com/schemas/sitemap-news/0.9">
<url><loc>https://www.threatwire.tech/news/brotli2shell-cve-2026-111497-reaches-dotnet-ffmpeg-clickhouse-and-arrow</loc><news:news><news:publication><news:name>ThreatWire</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-26T11:10:00.000Z</news:publication_date><news:title>Brotli2Shell: CVE-2026-111497 reaches .NET, FFmpeg, ClickHouse and Arrow</news:title></news:news></url>
<url><loc>https://www.threatwire.tech/research/linux-ipv6-rpl-route-of-root-is-cve-2026-43501</loc><news:news><news:publication><news:name>ThreatWire</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-26T00:10:00.000Z</news:publication_date><news:title>Linux IPv6 RPL &quot;Route of Root&quot; is CVE-2026-43501, CVSS 9.8</news:title></news:news></url>
<url><loc>https://www.threatwire.tech/threats/php2shell-breach-european-government-mfa-secrets-in-two-hours</loc><news:news><news:publication><news:name>ThreatWire</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-25T18:33:00.000Z</news:publication_date><news:title>PHP2Shell breach: attackers reached MFA secrets at a European government entity within two hours</news:title></news:news></url>
<url><loc>https://www.threatwire.tech/news/tailworm-tailscale-ssh-headscale-11-flaws-what-is-confirmed</loc><news:news><news:publication><news:name>ThreatWire</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-25T17:06:00.000Z</news:publication_date><news:title>Tailworm: 11 claimed Tailscale and headscale flaws, published without coordination. What is confirmed</news:title></news:news></url>
<url><loc>https://www.threatwire.tech/news/laravel-tokenguard-auth-bypass-cve-2026-114509-fixed-in-august-disclosed-in-october</loc><news:news><news:publication><news:name>ThreatWire</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-25T14:35:00.000Z</news:publication_date><news:title>Laravel TokenGuard auth bypass CVE-2026-114509: fixed in August, disclosed in October</news:title></news:news></url>
<url><loc>https://www.threatwire.tech/threats/adobe-commerce-magento-account-takeover-cve-2026-71362-cisa-kev</loc><news:news><news:publication><news:name>ThreatWire</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-24T23:33:00.000Z</news:publication_date><news:title>Adobe fixed Magento account takeover CVE-2026-71362 in August 2026; still in CISA KEV</news:title></news:news></url>
<url><loc>https://www.threatwire.tech/threats/electrum-4-8-3-fixes-bitcoin-wallet-rbf-trick-by-malicious-servers</loc><news:news><news:publication><news:name>ThreatWire</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-24T13:25:00.000Z</news:publication_date><news:title>Electrum 4.8.3 fixes Bitcoin wallet flaw abused by malicious servers in an RBF trick</news:title></news:news></url>
</urlset>
