Daily Security Brief — today's top actively-exploited and high-severity vulnerabilities.

Daily Security Brief — today's top actively-exploited and high-severity vulnerabilities.
⚡ 6 item(s) name a component we run (patch-watch).

• [CRITICAL] CVE-2026-119923 CVE-2026-119923: A heap-based buffer overflow in the TDS prelogin parser in the Babelfish for PostgreSQL ex… ⚡
nvd.nist.gov/vuln/detail/CVE-2026-119923
• [CRITICAL] CVE-2026-123198 CVE-2026-123198: LMFDB before commit 01829bd contains a server-side template injection vulnerability in the… ⚡
nvd.nist.gov/vuln/detail/CVE-2026-123198
• [CRITICAL] CVE-2026-54141 CVE-2026-54141: OpenHuman is an open-source agent harness available as a desktop application and Rust libr… ⚡
nvd.nist.gov/vuln/detail/CVE-2026-54141
• [CRITICAL] CVE-2026-54143 CVE-2026-54143: OpenHuman is an open-source agent harness available as a desktop application and Rust libr… ⚡
nvd.nist.gov/vuln/detail/CVE-2026-54143
• [HIGH] CVE-2026-62346 CVE-2026-62346: Wanderer is a self-hosted trail database for saving and sharing adventures. Prior to 0.19.… ⚡
nvd.nist.gov/vuln/detail/CVE-2026-62346
• [HIGH] CVE-2026-119924 CVE-2026-119924: An out-of-bounds read in the TDS RPC procedure-name parser in the Babelfish for PostgreSQL… ⚡
nvd.nist.gov/vuln/detail/CVE-2026-119924

Full brief: diginpl.com/security/brief
Sources: CISA KEV, NVD (NIST) and security news. DigiNepal links to each source; nothing is rewritten.