Daily Security Brief — today's top actively-exploited and high-severity vulnerabilities.

Daily Security Brief — today's top actively-exploited and high-severity vulnerabilities.
⚡ 6 item(s) name a component we run (patch-watch).

• [CRITICAL] CVE-2026-115557 CVE-2026-115557: Python has added a denylist for known compromised certificates to the "ssl" module to ensu… ⚡
nvd.nist.gov/vuln/detail/CVE-2026-115557
• [CRITICAL] CVE-2026-99078 CVE-2026-99078: In the Linux kernel, the following vulnerability has been resolved:

net/mlx5e: Prevent st… ⚡
nvd.nist.gov/vuln/detail/CVE-2026-99078
• [CRITICAL] CVE-2026-99079 CVE-2026-99079: In the Linux kernel, the following vulnerability has been resolved:

net/mlx5e: Prevent st… ⚡
nvd.nist.gov/vuln/detail/CVE-2026-99079
• [CRITICAL] CVE-2026-98959 CVE-2026-98959: In the Linux kernel, the following vulnerability has been resolved:

btrfs: fix xattr repl… ⚡
nvd.nist.gov/vuln/detail/CVE-2026-98959
• [HIGH] CVE-2026-116174 CVE-2026-116174: vLLM from 0.22.0 before 0.24.0 contains an improper input validation vulnerability in the … ⚡
nvd.nist.gov/vuln/detail/CVE-2026-116174
• [HIGH] CVE-2026-116173 CVE-2026-116173: vLLM from 0.22.0 before 0.24.0 contains a denial of service vulnerability that allows remo… ⚡
nvd.nist.gov/vuln/detail/CVE-2026-116173

Full brief: diginpl.com/security/brief
Sources: CISA KEV, NVD (NIST) and security news. DigiNepal links to each source; nothing is rewritten.