Daily Security Brief — today's top actively-exploited and high-severity vulnerabilities.

Daily Security Brief — today's top actively-exploited and high-severity vulnerabilities.
⚡ 6 item(s) name a component we run (patch-watch).

• [CRITICAL] CVE-2026-115905 CVE-2026-115905: zip is a zip library for Rust that supports reading and writing simple ZIP files. Through … ⚡
nvd.nist.gov/vuln/detail/CVE-2026-115905
• [CRITICAL] CVE-2026-77055 CVE-2026-77055: boneIO black_debian_images gives the boneio service account excessive privileges, includin… ⚡
nvd.nist.gov/vuln/detail/CVE-2026-77055
• [CRITICAL] CVE-2026-115188 CVE-2026-115188: An unrestricted file upload vulnerability exists in the campaign import feature of Mautic … ⚡
nvd.nist.gov/vuln/detail/CVE-2026-115188
• [HIGH] CVE-2026-116741 CVE-2026-116741: Speex (libspeex) through 1.2.1 contains an out-of-bounds write vulnerability in speex_bits… ⚡
nvd.nist.gov/vuln/detail/CVE-2026-116741
• [HIGH] CVE-2026-116588 CVE-2026-116588: Datadog dd-trace-py is the Datadog Python APM client. From 1.5.0 until 3.19.9 and 4.15.6, … ⚡
nvd.nist.gov/vuln/detail/CVE-2026-116588
• [HIGH] CVE-2026-116589 CVE-2026-116589: Datadog dd-trace-py is the Datadog Python APM client. From 3.13.0 until 4.15.5, the IAST s… ⚡
nvd.nist.gov/vuln/detail/CVE-2026-116589

Full brief: diginpl.com/security/brief
Sources: CISA KEV, NVD (NIST) and security news. DigiNepal links to each source; nothing is rewritten.