Daily Security Brief — today's top actively-exploited and high-severity vulnerabilities.

Daily Security Brief — today's top actively-exploited and high-severity vulnerabilities.
⚡ 6 item(s) name a component we run (patch-watch).

• [CRITICAL] CVE-2026-124079 CVE-2026-124079: rConfig Core 8.0.0 before 8.2.19 and rConfig Pro before 8.4.1 contain a deserialization of… ⚡
nvd.nist.gov/vuln/detail/CVE-2026-124079
• [CRITICAL] CVE-2026-123870 CVE-2026-123870: The otterdog webapp evaluates a format-string built from the incoming GitHub webhook JSON … ⚡
nvd.nist.gov/vuln/detail/CVE-2026-123870
• [CRITICAL] CVE-2026-114432 CVE-2026-114432: The Contact Form 7 WordPress plugin before 6.2.4 does not validate the type or extension o… ⚡
nvd.nist.gov/vuln/detail/CVE-2026-114432
• [HIGH] CVE-2026-114032 CVE-2026-114032: The OpenSSL library bundled with the Illumio VEN for Windows is affected by an uncontrolle… ⚡
nvd.nist.gov/vuln/detail/CVE-2026-114032
• [HIGH] CVE-2026-102643 CVE-2026-102643: AsyncSSH is a Python package which provides an asynchronous client and server implementati… ⚡
nvd.nist.gov/vuln/detail/CVE-2026-102643
• [HIGH] CVE-2026-125213 CVE-2026-125213: FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in the PSD decoder in l… ⚡
nvd.nist.gov/vuln/detail/CVE-2026-125213

Full brief: diginpl.com/security/brief
Sources: CISA KEV, NVD (NIST) and security news. DigiNepal links to each source; nothing is rewritten.