<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9"
        xmlns:news="http://www.google.com/schemas/sitemap-news/0.9">
  <url>
    <loc>https://threatfrontier.com/articles/plex-media-server-cisa-kev-cve-2026-96656-exploit-chain-patch</loc>
    <news:news>
      <news:publication>
        <news:name>ThreatFrontier.com</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-21T10:00:59.864Z</news:publication_date>
      <news:title>Plex Media Server Exploit Chain Lands in CISA KEV: Patch to 1.43.3.10861 Now</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://threatfrontier.com/articles/cairn-ai-intrusion-harness-exposed-panels-norforge-ecommerce</loc>
    <news:news>
      <news:publication>
        <news:name>ThreatFrontier.com</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-21T10:00:58.103Z</news:publication_date>
      <news:title>Exposed Cairn Panels Show AI-Driven Intrusion Is Cheap, Slow to Pay Off, and Already Hitting Online Retailers</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://threatfrontier.com/articles/litellm-cve-2026-35029-cve-2026-59823-config-update-admin-rce-ssrf</loc>
    <news:news>
      <news:publication>
        <news:name>ThreatFrontier.com</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-21T10:00:56.337Z</news:publication_date>
      <news:title>LiteLLM Gateway Flaws: Any Logged-In User Can Reach Admin and Code Execution, and a Second Bug Redirects Outbound Calls</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://threatfrontier.com/articles/dhs-fascsa-order-deepseek-federal-civilian-it-removal</loc>
    <news:news>
      <news:publication>
        <news:name>ThreatFrontier.com</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-21T10:00:54.564Z</news:publication_date>
      <news:title>DHS Orders DeepSeek, and Anything Built on It, Out of Federal Civilian IT</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://threatfrontier.com/articles/llama-cpp-realtime-transcription-websocket-tts-endpoint-voxtral</loc>
    <news:news>
      <news:publication>
        <news:name>ThreatFrontier.com</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-21T10:00:52.855Z</news:publication_date>
      <news:title>llama.cpp Gains a Realtime Transcription Websocket and a /tts Endpoint</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://threatfrontier.com/articles/oracle-october-2026-cpu-soa-suite-access-manager-ebs-cvss-10</loc>
    <news:news>
      <news:publication>
        <news:name>ThreatFrontier.com</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-21T10:00:51.036Z</news:publication_date>
      <news:title>Oracle&apos;s October CPU: Patch SOA Suite, Access Manager and EBS Mailer First</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://threatfrontier.com/articles/mcp-typescript-sdk-five-cves-1-32-0</loc>
    <news:news>
      <news:publication>
        <news:name>ThreatFrontier.com</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-21T10:00:49.226Z</news:publication_date>
      <news:title>Five MCP TypeScript SDK Flaws Let Clients Read Each Other&apos;s Messages and Tasks, and Two Fixes Need Config Changes</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://threatfrontier.com/articles/sglang-cve-2026-93034-pickle-rce-zmq-pickle-ipc-disabled</loc>
    <news:news>
      <news:publication>
        <news:name>ThreatFrontier.com</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-21T10:00:47.464Z</news:publication_date>
      <news:title>SGLang CVE-2026-93034: Turning Off Pickle IPC Does Not Stop Remote Code Execution</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://threatfrontier.com/articles/moviepilot-cve-2026-77931-prompt-injection-execute-command-rce</loc>
    <news:news>
      <news:publication>
        <news:name>ThreatFrontier.com</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-21T10:00:45.649Z</news:publication_date>
      <news:title>MoviePilot&apos;s AI Assistant Can Be Steered Into Running Host Commands (CVE-2026-77931)</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://threatfrontier.com/articles/siteguard-server-edition-cve-2026-106931-exploited-collect-diagnostics</loc>
    <news:news>
      <news:publication>
        <news:name>ThreatFrontier.com</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-21T10:00:43.647Z</news:publication_date>
      <news:title>SiteGuard Server Edition Command Injection Is Exploited, and Patching Can Wipe the Evidence</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://threatfrontier.com/articles/how-to-draw-a-floor-plan-with-claude-code-mcp-walkthrough</loc>
    <news:news>
      <news:publication>
        <news:name>ThreatFrontier.com</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-20T13:00:00.000Z</news:publication_date>
      <news:title>How to Draw a Floor Plan With Claude Code: An MCP Walkthrough</news:title>
    </news:news>
  </url>
</urlset>
