Daily Security Brief — today's top actively-exploited and high-severity vulnerabilities.

Daily Security Brief — today's top actively-exploited and high-severity vulnerabilities.
⚡ 6 item(s) name a component we run (patch-watch).

• [CRITICAL] CVE-2026-63190 CVE-2026-63190: FearlessCMS is a flat-file `content` management system centered on simplicity and open sou… ⚡
nvd.nist.gov/vuln/detail/CVE-2026-63190
• [CRITICAL] CVE-2026-112197 CVE-2026-112197: Vulnerability due to a lack of authentication in critical functions of the NoviGest Deskto… ⚡
nvd.nist.gov/vuln/detail/CVE-2026-112197
• [CRITICAL] CVE-2026-116692 CVE-2026-116692: MLflow is an open source AI engineering platform for agents, large language models, and ma… ⚡
nvd.nist.gov/vuln/detail/CVE-2026-116692
• [KEV] CVE-2026-46300 Linux Kernel Missing Initialization of a Variable Vulnerability ⚡
nvd.nist.gov/vuln/detail/CVE-2026-46300
• [HIGH] CVE-2026-118668 CVE-2026-118668: langgraph-api implements the LangGraph API for rapid development and testing. From 0.1.2 u… ⚡
nvd.nist.gov/vuln/detail/CVE-2026-118668
• [HIGH] CVE-2026-118664 CVE-2026-118664: decode-uri-component provides a more robust alternative to decodeURIComponent. Prior to 0.… ⚡
nvd.nist.gov/vuln/detail/CVE-2026-118664

Full brief: diginpl.com/security/brief
Sources: CISA KEV, NVD (NIST) and security news. DigiNepal links to each source; nothing is rewritten.