Daily Security Brief — today's top actively-exploited and high-severity vulnerabilities.

Daily Security Brief — today's top actively-exploited and high-severity vulnerabilities.
⚡ 6 item(s) name a component we run (patch-watch).

• [CRITICAL] CVE-2026-114611 CVE-2026-114611: OCO-Server is a self-hosted endpoint management application for computer inventory, softwa… ⚡
nvd.nist.gov/vuln/detail/CVE-2026-114611
• [CRITICAL] CVE-2026-96639 CVE-2026-96639: Pillow is a Python imaging library. From 11.0.0 until 13.0.0, multi-frame loaders can reta… ⚡
nvd.nist.gov/vuln/detail/CVE-2026-96639
• [CRITICAL] CVE-2026-114139 CVE-2026-114139: Sentry-Javascript is an official Sentry SDKs for JavaScript. From 9.36.0 until 9.47.2, 10.… ⚡
nvd.nist.gov/vuln/detail/CVE-2026-114139
• [CRITICAL] CVE-2026-112408 CVE-2026-112408: Missing verification of source of a communication channel in the default_bucket() function… ⚡
nvd.nist.gov/vuln/detail/CVE-2026-112408
• [HIGH] CVE-2026-115392 CVE-2026-115392: Wasmtime before 24.0.13, 25.0.0 before 36.0.14, 37.0.0 before 46.0.3, and 47.0.0 before 47… ⚡
nvd.nist.gov/vuln/detail/CVE-2026-115392
• [HIGH] CVE-2026-114613 CVE-2026-114613: MessagePack is the serializer implementation for Python msgpack.org. Prior to 1.2.3, the m… ⚡
nvd.nist.gov/vuln/detail/CVE-2026-114613

Full brief: diginpl.com/security/brief
Sources: CISA KEV, NVD (NIST) and security news. DigiNepal links to each source; nothing is rewritten.