<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">

  <!-- Main CV -->
  <url>
    <loc>https://alexanderconstantinou.uk/</loc>
    <lastmod>2026-04-21</lastmod>
    <changefreq>monthly</changefreq>
    <priority>1.0</priority>
  </url>

  <!-- Blog index -->
  <url>
    <loc>https://alexanderconstantinou.uk/blog/</loc>
    <lastmod>2026-05-09</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.9</priority>
  </url>

  <!-- CVE posts -->
  <url>
    <loc>https://alexanderconstantinou.uk/blog/posts/cve-2026-48102-openssh-gssapi-preauth-rce.html</loc>
    <lastmod>2026-05-21</lastmod>
    <changefreq>never</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://alexanderconstantinou.uk/blog/posts/cve-2026-47219-rails-actionpack-marshal-rce.html</loc>
    <lastmod>2026-05-12</lastmod>
    <changefreq>never</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://alexanderconstantinou.uk/blog/posts/cve-2026-46580-paloalto-globalprotect-rce.html</loc>
    <lastmod>2026-05-08</lastmod>
    <changefreq>never</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://alexanderconstantinou.uk/blog/posts/cve-2026-45887-f5-bigip-tmui-auth-bypass-rce.html</loc>
    <lastmod>2026-05-06</lastmod>
    <changefreq>never</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://alexanderconstantinou.uk/blog/posts/cve-2026-45201-ivanti-connect-secure-ssrf-rce.html</loc>
    <lastmod>2026-05-05</lastmod>
    <changefreq>never</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://alexanderconstantinou.uk/blog/posts/cve-2026-44891-confluence-ognl-rce.html</loc>
    <lastmod>2026-05-03</lastmod>
    <changefreq>never</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://alexanderconstantinou.uk/blog/posts/cve-2026-43112-tomcat-partial-put-rce.html</loc>
    <lastmod>2026-05-02</lastmod>
    <changefreq>never</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://alexanderconstantinou.uk/blog/posts/cve-2026-41203-nextjs-auth-bypass.html</loc>
    <lastmod>2026-04-28</lastmod>
    <changefreq>never</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://alexanderconstantinou.uk/blog/posts/cve-2026-40891-vcenter-file-upload-rce.html</loc>
    <lastmod>2026-04-28</lastmod>
    <changefreq>never</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://alexanderconstantinou.uk/blog/posts/cve-2026-39801-fortigate-sslvpn-rce.html</loc>
    <lastmod>2026-04-27</lastmod>
    <changefreq>never</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://alexanderconstantinou.uk/blog/posts/cve-2026-38112-erlang-otp-ssh-rce.html</loc>
    <lastmod>2026-04-27</lastmod>
    <changefreq>never</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://alexanderconstantinou.uk/blog/posts/cve-2026-36128-veeam-br-rce.html</loc>
    <lastmod>2026-04-25</lastmod>
    <changefreq>never</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://alexanderconstantinou.uk/blog/posts/cve-2026-36540-gitlab-ssrf-rce.html</loc>
    <lastmod>2026-04-25</lastmod>
    <changefreq>never</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://alexanderconstantinou.uk/blog/posts/cve-2026-33825-windows-defender-bluehammer.html</loc>
    <lastmod>2026-04-24</lastmod>
    <changefreq>never</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://alexanderconstantinou.uk/blog/posts/cve-2023-27351-papercut-auth-bypass.html</loc>
    <lastmod>2026-04-24</lastmod>
    <changefreq>never</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://alexanderconstantinou.uk/blog/posts/cve-2025-32975-quest-kace-auth-bypass.html</loc>
    <lastmod>2026-04-23</lastmod>
    <changefreq>never</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://alexanderconstantinou.uk/blog/posts/cve-2026-34197-activemq-jolokia-rce.html</loc>
    <lastmod>2026-04-23</lastmod>
    <changefreq>never</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://alexanderconstantinou.uk/blog/posts/cve-2026-34621-adobe-acrobat-prototype-pollution.html</loc>
    <lastmod>2026-04-21</lastmod>
    <changefreq>never</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://alexanderconstantinou.uk/blog/posts/cve-2026-20122-20128-20133-cisco-sdwan.html</loc>
    <lastmod>2026-04-21</lastmod>
    <changefreq>never</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://alexanderconstantinou.uk/blog/posts/cve-2026-33824-windows-ike-rce.html</loc>
    <lastmod>2026-04-19</lastmod>
    <changefreq>never</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://alexanderconstantinou.uk/blog/posts/cve-2026-33032-nginx-ui-mcpwn.html</loc>
    <lastmod>2026-04-16</lastmod>
    <changefreq>never</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://alexanderconstantinou.uk/blog/posts/cve-2026-32201-sharepoint-spoofing-zero-day.html</loc>
    <lastmod>2026-04-14</lastmod>
    <changefreq>never</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://alexanderconstantinou.uk/blog/posts/cve-2026-4634-4636-keycloak.html</loc>
    <lastmod>2026-04-10</lastmod>
    <changefreq>never</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://alexanderconstantinou.uk/blog/posts/cve-2026-35616-forticlient-ems-auth-bypass.html</loc>
    <lastmod>2026-04-08</lastmod>
    <changefreq>never</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://alexanderconstantinou.uk/blog/posts/cve-2026-33634-trivy-supply-chain.html</loc>
    <lastmod>2026-03-27</lastmod>
    <changefreq>never</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://alexanderconstantinou.uk/blog/posts/cve-2026-33017-langflow-rce.html</loc>
    <lastmod>2026-03-20</lastmod>
    <changefreq>never</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://alexanderconstantinou.uk/blog/posts/cve-2025-53770-sharepoint-toolshell.html</loc>
    <lastmod>2025-07-25</lastmod>
    <changefreq>never</changefreq>
    <priority>0.7</priority>
  </url>

  <!-- HTB posts -->
  <url>
    <loc>https://alexanderconstantinou.uk/blog/posts/htb-nexus.html</loc>
    <lastmod>2026-05-16</lastmod>
    <changefreq>never</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://alexanderconstantinou.uk/blog/posts/htb-oasis.html</loc>
    <lastmod>2026-05-09</lastmod>
    <changefreq>never</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://alexanderconstantinou.uk/blog/posts/htb-phantom.html</loc>
    <lastmod>2026-05-07</lastmod>
    <changefreq>never</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://alexanderconstantinou.uk/blog/posts/htb-wraith.html</loc>
    <lastmod>2026-05-04</lastmod>
    <changefreq>never</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://alexanderconstantinou.uk/blog/posts/htb-reaper.html</loc>
    <lastmod>2026-04-28</lastmod>
    <changefreq>never</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://alexanderconstantinou.uk/blog/posts/htb-fluffy.html</loc>
    <lastmod>2026-04-27</lastmod>
    <changefreq>never</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://alexanderconstantinou.uk/blog/posts/htb-spectre.html</loc>
    <lastmod>2026-04-26</lastmod>
    <changefreq>never</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://alexanderconstantinou.uk/blog/posts/htb-strutted.html</loc>
    <lastmod>2026-04-24</lastmod>
    <changefreq>never</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://alexanderconstantinou.uk/blog/posts/htb-cypher.html</loc>
    <lastmod>2026-04-23</lastmod>
    <changefreq>never</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://alexanderconstantinou.uk/blog/posts/htb-eighteen.html</loc>
    <lastmod>2026-04-21</lastmod>
    <changefreq>never</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://alexanderconstantinou.uk/blog/posts/htb-browsed.html</loc>
    <lastmod>2026-04-21</lastmod>
    <changefreq>never</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://alexanderconstantinou.uk/blog/posts/htb-expressway.html</loc>
    <lastmod>2026-04-21</lastmod>
    <changefreq>never</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://alexanderconstantinou.uk/blog/posts/htb-snapped.html</loc>
    <lastmod>2026-04-19</lastmod>
    <changefreq>never</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://alexanderconstantinou.uk/blog/posts/htb-conversor.html</loc>
    <lastmod>2026-03-10</lastmod>
    <changefreq>never</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://alexanderconstantinou.uk/blog/posts/htb-nanocorp.html</loc>
    <lastmod>2025-12-05</lastmod>
    <changefreq>never</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://alexanderconstantinou.uk/blog/posts/htb-voleur.html</loc>
    <lastmod>2025-11-08</lastmod>
    <changefreq>never</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://alexanderconstantinou.uk/blog/posts/htb-nocturnal.html</loc>
    <lastmod>2025-08-16</lastmod>
    <changefreq>never</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://alexanderconstantinou.uk/blog/posts/htb-dog.html</loc>
    <lastmod>2025-09-05</lastmod>
    <changefreq>never</changefreq>
    <priority>0.7</priority>
  </url>

</urlset>
