Daily Security Brief — today's top actively-exploited and high-severity vulnerabilities.

Daily Security Brief — today's top actively-exploited and high-severity vulnerabilities.
⚡ 6 item(s) name a component we run (patch-watch).

• [CRITICAL] CVE-2026-105769 CVE-2026-105769: kaniko before 1.25.20 can send a Microsoft Entra ID (Azure AD) access token for Azure Reso… ⚡
nvd.nist.gov/vuln/detail/CVE-2026-105769
• [CRITICAL] CVE-2026-120459 CVE-2026-120459: python-jose through 3.5.0 contains an authentication bypass vulnerability that allows unau… ⚡
nvd.nist.gov/vuln/detail/CVE-2026-120459
• [CRITICAL] CVE-2026-120344 CVE-2026-120344: A vulnerability has been found in WAVLINK WN551X3-A M51X3_V251020-WO-182e965. This affects… ⚡
nvd.nist.gov/vuln/detail/CVE-2026-120344
• [CRITICAL] CVE-2026-120280 CVE-2026-120280: A vulnerability has been found in WAVLINK WN536AX6-A V260507. The impacted element is the … ⚡
nvd.nist.gov/vuln/detail/CVE-2026-120280
• [CRITICAL] CVE-2026-120277 CVE-2026-120277: A security vulnerability has been detected in WAVLINK WN536AX6-A V260507_2.0.0. This issue… ⚡
nvd.nist.gov/vuln/detail/CVE-2026-120277
• [CRITICAL] CVE-2026-120338 CVE-2026-120338: Prefab UI's Generative UI sandbox runs caller-supplied Python inside Pyodide, Python compi… ⚡
nvd.nist.gov/vuln/detail/CVE-2026-120338

Full brief: diginpl.com/security/brief
Sources: CISA KEV, NVD (NIST) and security news. DigiNepal links to each source; nothing is rewritten.