<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:news="http://www.google.com/schemas/sitemap-news/0.9">
<url>
<loc>https://onesignaldesk.com/news/ninja-forms-cve-2026-94504-update-check-backdoors</loc>
<news:news>
<news:publication><news:name>OneSignalDesk</news:name><news:language>en</news:language></news:publication>
<news:publication_date>2026-11-05T20:31:00+08:00</news:publication_date>
<news:title>Ninja Forms flaw CVE-2026-94504 used to plant hidden WordPress admins</news:title>
</news:news>
</url>
<url>
<loc>https://onesignaldesk.com/news/airbyte-connector-builder-rce-upgrade-2-2-0</loc>
<news:news>
<news:publication><news:name>OneSignalDesk</news:name><news:language>en</news:language></news:publication>
<news:publication_date>2026-11-05T13:09:00+08:00</news:publication_date>
<news:title>Airbyte 2.2.0 fixes Connector Builder flaw JPCERT says is exploited</news:title>
</news:news>
</url>
<url>
<loc>https://onesignaldesk.com/news/zyxel-gs1900-cve-2026-107441-patch-3-update</loc>
<news:news>
<news:publication><news:name>OneSignalDesk</news:name><news:language>en</news:language></news:publication>
<news:publication_date>2026-11-05T13:09:00+08:00</news:publication_date>
<news:title>Zyxel fixes GS1900 flaw researchers tie to ~1,000 hacked switches</news:title>
</news:news>
</url>
</urlset>
