Daily Security Brief — today's top actively-exploited and high-severity vulnerabilities.

Daily Security Brief — today's top actively-exploited and high-severity vulnerabilities.
⚡ 6 item(s) name a component we run (patch-watch).

• [CRITICAL] CVE-2026-120338 CVE-2026-120338: Prefab UI's Generative UI sandbox runs caller-supplied Python inside Pyodide, Python compi… ⚡
nvd.nist.gov/vuln/detail/CVE-2026-120338
• [CRITICAL] CVE-2026-120306 CVE-2026-120306: Beta9 turns each shell command in a tenant image definition into a Dockerfile RUN line and… ⚡
nvd.nist.gov/vuln/detail/CVE-2026-120306
• [CRITICAL] CVE-2026-119716 CVE-2026-119716: pybars3 through 0.9.7 contains a code injection vulnerability in pybars/_compiler.py that … ⚡
nvd.nist.gov/vuln/detail/CVE-2026-119716
• [CRITICAL] CVE-2026-119717 CVE-2026-119717: pybars4 through 0.9.13 contains a code injection vulnerability in pybars/_compiler.py that… ⚡
nvd.nist.gov/vuln/detail/CVE-2026-119717
• [HIGH] CVE-2026-120240 CVE-2026-120240: A vulnerability was determined in WAVLINK WN553X1-B V260403_2.0.0. This issue affects the … ⚡
nvd.nist.gov/vuln/detail/CVE-2026-120240
• [HIGH] CVE-2026-120239 CVE-2026-120239: A vulnerability was found in WAVLINK WN553X1-B V260403_2.0.0. This vulnerability affects t… ⚡
nvd.nist.gov/vuln/detail/CVE-2026-120239

Full brief: diginpl.com/security/brief
Sources: CISA KEV, NVD (NIST) and security news. DigiNepal links to each source; nothing is rewritten.