Daily Security Brief — today's top actively-exploited and high-severity vulnerabilities.

Daily Security Brief — today's top actively-exploited and high-severity vulnerabilities.
⚡ 6 item(s) name a component we run (patch-watch).

• [CRITICAL] CVE-2026-116692 CVE-2026-116692: MLflow is an open source AI engineering platform for agents, large language models, and ma… ⚡
nvd.nist.gov/vuln/detail/CVE-2026-116692
• [CRITICAL] CVE-2026-106076 CVE-2026-106076: A vulnerability allowing an authenticated organization-transfer peer to inject SQL into th… ⚡
nvd.nist.gov/vuln/detail/CVE-2026-106076
• [CRITICAL] CVE-2026-103594 CVE-2026-103594: A stack-based buffer overflow vulnerability in Fireware OS's WireGuard configuration proce… ⚡
nvd.nist.gov/vuln/detail/CVE-2026-103594
• [CRITICAL] CVE-2026-117603 CVE-2026-117603: Electrum before 4.7.2 contains a spending limit bypass vulnerability in the Nostr Wallet C… ⚡
nvd.nist.gov/vuln/detail/CVE-2026-117603
• [KEV] CVE-2026-46300 Linux Kernel Missing Initialization of a Variable Vulnerability ⚡
nvd.nist.gov/vuln/detail/CVE-2026-46300
• [HIGH] CVE-2026-118378 CVE-2026-118378: Tabularis before 0.28.0 contains an SQL injection vulnerability in its SQLite driver that … ⚡
nvd.nist.gov/vuln/detail/CVE-2026-118378

Full brief: diginpl.com/security/brief
Sources: CISA KEV, NVD (NIST) and security news. DigiNepal links to each source; nothing is rewritten.