<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: apereo-foundation-openequella</title><description>Every new CVE for apereo-foundation-openequella.</description><link>https://agentprime.io/</link><item><title>CVE-2026-66092: Stored XSS in pre-login notice via reachable legacy logon route</title><link>https://agentprime.io/advisories/CVE-2026-66092/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-66092/</guid><description>CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 29 Oct 2026 01:39:28 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-66091: Unauthenticated IDOR Enables Disclosure of Other Users’ last-known details</title><link>https://agentprime.io/advisories/CVE-2026-66091/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-66091/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 29 Oct 2026 01:38:24 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-66090: XML External Entity (XXE) Injection in Metadata Field Allows Arbitrary File Read</title><link>https://agentprime.io/advisories/CVE-2026-66090/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-66090/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 29 Oct 2026 01:37:37 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-66089: XML External Entity (XXE) Vulnerability in SOAP Interface Allows External Entity Expansion</title><link>https://agentprime.io/advisories/CVE-2026-66089/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-66089/</guid><description>CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 29 Oct 2026 01:36:30 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-66088: Unrestricted Command Execution via system.execute</title><link>https://agentprime.io/advisories/CVE-2026-66088/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-66088/</guid><description>CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 29 Oct 2026 01:35:46 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-16889: Stored XSS via Pre-Login Notice Image Upload Serves Attacker HTML from Application Origin</title><link>https://agentprime.io/advisories/CVE-2026-16889/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-16889/</guid><description>CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 29 Oct 2026 01:32:09 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-67615: openEQUELLA &lt; 2026.1.0 Authenticated RCE via Java Deserialization in HTTP Invoker</title><link>https://agentprime.io/advisories/CVE-2026-67615/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-67615/</guid><description>CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 22 Sep 2026 20:30:55 GMT</pubDate><category>CVE</category></item></channel></rss>