<?xml version="1.0" encoding="UTF-8"?><urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:news="http://www.google.com/schemas/sitemap-news/0.9"><url><loc>https://securecrew.es/noticia/xen-xsa-523-dos-fallos-permiten-leer-y-escribir-memoria-ajena</loc><news:news><news:publication><news:name>SecureCrew</news:name><news:language>es</news:language></news:publication><news:publication_date>2026-11-04T13:00:00.000Z</news:publication_date><news:title>Xen XSA-523: dos fallos permiten leer y escribir memoria ajena</news:title></news:news></url><url><loc>https://securecrew.es/noticia/cgi-pm-20-cve-version-5-00</loc><news:news><news:publication><news:name>SecureCrew</news:name><news:language>es</news:language></news:publication><news:publication_date>2026-11-04T11:00:00.000Z</news:publication_date><news:title>CGI.pm divulga 20 CVE y recomienda actualizar a 5.00 o posterior</news:title></news:news></url><url><loc>https://securecrew.es/noticia/ataque-cpguard-2946-servidores-datos-clientes</loc><news:news><news:publication><news:name>SecureCrew</news:name><news:language>es</news:language></news:publication><news:publication_date>2026-11-04T09:00:00.000Z</news:publication_date><news:title>El ataque a cPGuard alcanza 2.946 servidores y expone datos de clientes</news:title></news:news></url><url><loc>https://securecrew.es/noticia/que-es-un-cve</loc><news:news><news:publication><news:name>SecureCrew</news:name><news:language>es</news:language></news:publication><news:publication_date>2026-11-03T22:00:00.000Z</news:publication_date><news:title>Qué es un CVE y cómo se lee un identificador</news:title></news:news></url><url><loc>https://securecrew.es/noticia/rhel-9-parche-cve-2026-94300-bind</loc><news:news><news:publication><news:name>SecureCrew</news:name><news:language>es</news:language></news:publication><news:publication_date>2026-11-03T19:00:00.000Z</news:publication_date><news:title>RHEL 9 recibe un parche para una RCE en BIND por GSS-TSIG</news:title></news:news></url><url><loc>https://securecrew.es/noticia/aws-vew-cloudformation-rce-cve-2026-119085</loc><news:news><news:publication><news:name>SecureCrew</news:name><news:language>es</news:language></news:publication><news:publication_date>2026-11-03T17:00:00.000Z</news:publication_date><news:title>AWS VEW: una plantilla permitía ejecutar código</news:title></news:news></url><url><loc>https://securecrew.es/noticia/llmjacking-credenciales-cloud-facturas-100000</loc><news:news><news:publication><news:name>SecureCrew</news:name><news:language>es</news:language></news:publication><news:publication_date>2026-11-03T13:00:00.000Z</news:publication_date><news:title>LLMJacking dispara facturas cloud a seis cifras</news:title></news:news></url><url><loc>https://securecrew.es/noticia/apache-syncope-juel-bpmn-rce-cve-2026-109083</loc><news:news><news:publication><news:name>SecureCrew</news:name><news:language>es</news:language></news:publication><news:publication_date>2026-11-03T11:00:00.000Z</news:publication_date><news:title>Apache Syncope permite ejecutar JUEL en procesos BPMN</news:title></news:news></url><url><loc>https://securecrew.es/noticia/xcpe-botnet-android-tv-boxes-proxy-residencial</loc><news:news><news:publication><news:name>SecureCrew</news:name><news:language>es</news:language></news:publication><news:publication_date>2026-11-03T09:00:00.000Z</news:publication_date><news:title>XCPE convirtió TV boxes Android en proxies criminales</news:title></news:news></url><url><loc>https://securecrew.es/noticia/knip-cve-2026-120325-traversal-issuefixer</loc><news:news><news:publication><news:name>SecureCrew</news:name><news:language>es</news:language></news:publication><news:publication_date>2026-11-02T19:00:00.000Z</news:publication_date><news:title>Knip: CVE atribuye traversal de rutas a IssueFixer</news:title></news:news></url><url><loc>https://securecrew.es/noticia/mcphub-cve-2026-120323-cabeceras-v1-1-8</loc><news:news><news:publication><news:name>SecureCrew</news:name><news:language>es</news:language></news:publication><news:publication_date>2026-11-02T17:00:00.000Z</news:publication_date><news:title>CVE de MCPHub señala un fallo en el reenvío de cabeceras; v1.1.8 ya estaba publicada</news:title></news:news></url></urlset>