Daily Security Brief — today's top actively-exploited and high-severity vulnerabilities.

Daily Security Brief — today's top actively-exploited and high-severity vulnerabilities.
⚡ 6 item(s) name a component we run (patch-watch).

• [CRITICAL] CVE-2026-126378 CVE-2026-126378: Vvveb through 1.0.8.6 contains a file upload vulnerability in the theme installer validFil… ⚡
nvd.nist.gov/vuln/detail/CVE-2026-126378
• [CRITICAL] CVE-2026-126837 CVE-2026-126837: A validation flaw in the DNS SRV host discovery of the MongoDB Node.js driver may cause th… ⚡
nvd.nist.gov/vuln/detail/CVE-2026-126837
• [HIGH] CVE-2026-126384 CVE-2026-126384: n8n before 1.123.89, 2.x before 2.45.5, 2.46.x before 2.46.1, and 3.x before 3.0.1 bundles… ⚡
nvd.nist.gov/vuln/detail/CVE-2026-126384
• [HIGH] CVE-2026-126319 CVE-2026-126319: Dockhand before 1.0.55 contains an arbitrary file read vulnerability that allows authentic… ⚡
nvd.nist.gov/vuln/detail/CVE-2026-126319
• [HIGH] CVE-2026-126320 CVE-2026-126320: Dockhand before 1.0.55 contains an improper authorization vulnerability that lets users ho… ⚡
nvd.nist.gov/vuln/detail/CVE-2026-126320
• [HIGH] CVE-2026-126321 CVE-2026-126321: Dockhand before 1.0.55 contains a path traversal vulnerability that allows authenticated u… ⚡
nvd.nist.gov/vuln/detail/CVE-2026-126321

Full brief: diginpl.com/security/brief
Sources: CISA KEV, NVD (NIST) and security news. DigiNepal links to each source; nothing is rewritten.