<?xml version="1.0" encoding="UTF-8"?><urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:news="http://www.google.com/schemas/sitemap-news/0.9"><url><loc>https://payloadreport.com/section/vulnerabilities/fortisiem-web-interface-low-severity-broken/</loc><news:news><news:publication><news:name>Payload Report</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-13T19:08:11Z</news:publication_date><news:title>FortiSIEM Web Interface Low-Severity Broken Authorization Requires Valid Credentials for Command Execution</news:title></news:news></url><url><loc>https://payloadreport.com/section/vulnerabilities/quarkus-code-gen-bug-cve-2026-87744-enables-auth/</loc><news:news><news:publication><news:name>Payload Report</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-13T15:31:34Z</news:publication_date><news:title>Quarkus Code Gen Bug CVE-2026-87744 Enables Auth Bypass via Annotation Misuse</news:title></news:news></url><url><loc>https://payloadreport.com/section/threat-intel/criminal-ip-ai-platform-to-map-malicious/</loc><news:news><news:publication><news:name>Payload Report</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-13T14:20:12Z</news:publication_date><news:title>Criminal IP AI Platform to Map Malicious Infrastructure and Partner Risks at Security Days Tokyo</news:title></news:news></url><url><loc>https://payloadreport.com/section/cyber-attacks/danfoss-controller-flaw-exploited-to-defrost/</loc><news:news><news:publication><news:name>Payload Report</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-13T08:50:55Z</news:publication_date><news:title>Danfoss Controller Flaw Exploited to Defrost European Supermarket Freezers</news:title></news:news></url><url><loc>https://payloadreport.com/section/vulnerabilities/google-dev-sites-expose-rce-via-pickle/</loc><news:news><news:publication><news:name>Payload Report</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-13T06:58:43Z</news:publication_date><news:title>Google Dev Sites Expose RCE via Pickle Deserialization in Flask Session</news:title></news:news></url><url><loc>https://payloadreport.com/section/cyber-attacks/google-devsite-session-forgery-flaw-enabled/</loc><news:news><news:publication><news:name>Payload Report</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-13T03:49:53Z</news:publication_date><news:title>Google DevSite Session Forgery Flaw Enabled Remote Code Execution</news:title></news:news></url><url><loc>https://payloadreport.com/section/cloud-security/central-cloud-identity-role-demands-iam-rethink/</loc><news:news><news:publication><news:name>Payload Report</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-13T01:29:38Z</news:publication_date><news:title>Central Cloud Identity Role Demands IAM Rethink for Enterprise App Cyber Resilience</news:title></news:news></url><url><loc>https://payloadreport.com/section/vulnerabilities/sap-mii-auth-bypass-cve-2026-89108-lets-admins/</loc><news:news><news:publication><news:name>Payload Report</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-13T01:07:25Z</news:publication_date><news:title>SAP MII Auth Bypass CVE-2026-89108 Lets Admins Hijack Java Server in 15.4, 15.5</news:title></news:news></url><url><loc>https://payloadreport.com/section/vulnerabilities/neo4j-graphql-cypher-field-auth-flaw-cve-2026/</loc><news:news><news:publication><news:name>Payload Report</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-12T16:45:16Z</news:publication_date><news:title>Neo4j GraphQL Cypher Field Auth Flaw CVE-2026-92681 Patched in v7.6.4</news:title></news:news></url><url><loc>https://payloadreport.com/section/malware/ionq-to-acquire-ransomware-containment-firm/</loc><news:news><news:publication><news:name>Payload Report</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-12T11:31:07Z</news:publication_date><news:title>IonQ to acquire ransomware containment firm Elisity in $1.3bn stock deal</news:title></news:news></url><url><loc>https://payloadreport.com/section/vulnerabilities/sonicwall-sma1000-critical-ssrf-cve-2026-102255/</loc><news:news><news:publication><news:name>Payload Report</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-12T09:07:03Z</news:publication_date><news:title>SonicWall SMA1000 Critical SSRF CVE-2026-102255 Hit Honeypots Two Days Post-Disclosure</news:title></news:news></url><url><loc>https://payloadreport.com/section/vulnerabilities/unpatched-trendnet-routers-enable-remote-os/</loc><news:news><news:publication><news:name>Payload Report</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-12T09:05:38Z</news:publication_date><news:title>Unpatched TRENDnet routers enable remote OS command injection via web backend flaw</news:title></news:news></url></urlset>