Daily Security Brief — today's top actively-exploited and high-severity vulnerabilities.

Daily Security Brief — today's top actively-exploited and high-severity vulnerabilities.
⚡ 6 item(s) name a component we run (patch-watch).

• [CRITICAL] CVE-2026-126837 CVE-2026-126837: A validation flaw in the DNS SRV host discovery of the MongoDB Node.js driver may cause th… ⚡
nvd.nist.gov/vuln/detail/CVE-2026-126837
• [HIGH] CVE-2026-121876 CVE-2026-121876: A flaw was found in the interaction between systemd-gpt-auto-generator and
confidential c… ⚡
nvd.nist.gov/vuln/detail/CVE-2026-121876
• [HIGH] CVE-2026-126329 CVE-2026-126329: Docker Sandboxes reuses existing state and configuration directories without verifying the… ⚡
nvd.nist.gov/vuln/detail/CVE-2026-126329
• [HIGH] CVE-2026-14661 CVE-2026-14661: External control of file name in PostgreSQL dblink and CREATE/ALTER SUBSCRIPTION allows a … ⚡
nvd.nist.gov/vuln/detail/CVE-2026-14661
• [HIGH] CVE-2026-18447 CVE-2026-18447: Type confusion in PostgreSQL SQL-language functions allows an object creator to execute ar… ⚡
nvd.nist.gov/vuln/detail/CVE-2026-18447
• [HIGH] CVE-2026-6460 CVE-2026-6460: Type confusion in PostgreSQL allows an object creator to execute arbitrary code as the ope… ⚡
nvd.nist.gov/vuln/detail/CVE-2026-6460

Full brief: diginpl.com/security/brief
Sources: CISA KEV, NVD (NIST) and security news. DigiNepal links to each source; nothing is rewritten.