<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9"
        xmlns:news="http://www.google.com/schemas/sitemap-news/0.9">
        <url>
        <loc>https://knutmichael.com/radar/2026-11-02-zdi-26-850-microsoft-qlib-mlflowrecorder-deserialization-of-untrusted-data-remote-code-execution-vulnerability</loc>
        <news:news>
            <news:publication>
                <news:name>Knut Michael Haugland</news:name>
                <news:language>en</news:language>
            </news:publication>
            <news:publication_date>2026-11-02T00:00:00+01:00</news:publication_date>
            <news:title>ZDI-26-850: Microsoft Qlib MLflowRecorder Deserialization of Untrusted Data Remote Code Execution Vulnerability</news:title>
        </news:news>
    </url>
        <url>
        <loc>https://knutmichael.com/radar/2026-11-02-zdi-26-849-microsoft-qlib-restrictedunpickler-deserialization-of-untrusted-data-remote-code-execution-vulnerability</loc>
        <news:news>
            <news:publication>
                <news:name>Knut Michael Haugland</news:name>
                <news:language>en</news:language>
            </news:publication>
            <news:publication_date>2026-11-02T00:00:00+01:00</news:publication_date>
            <news:title>ZDI-26-849: Microsoft Qlib RestrictedUnpickler Deserialization of Untrusted Data Remote Code Execution Vulnerability</news:title>
        </news:news>
    </url>
        <url>
        <loc>https://knutmichael.com/radar/2026-11-02-zdi-26-848-microsoft-qlib-staticdataloader-deserialization-of-untrusted-data-remote-code-execution-vulnerability</loc>
        <news:news>
            <news:publication>
                <news:name>Knut Michael Haugland</news:name>
                <news:language>en</news:language>
            </news:publication>
            <news:publication_date>2026-11-02T00:00:00+01:00</news:publication_date>
            <news:title>ZDI-26-848: Microsoft Qlib StaticDataLoader Deserialization of Untrusted Data Remote Code Execution Vulnerability</news:title>
        </news:news>
    </url>
    </urlset>
