Daily Security Brief — today's top actively-exploited and high-severity vulnerabilities.

Daily Security Brief — today's top actively-exploited and high-severity vulnerabilities.
⚡ 6 item(s) name a component we run (patch-watch).

• [CRITICAL] CVE-2026-63190 CVE-2026-63190: FearlessCMS is a flat-file `content` management system centered on simplicity and open sou… ⚡
nvd.nist.gov/vuln/detail/CVE-2026-63190
• [CRITICAL] CVE-2026-112197 CVE-2026-112197: Vulnerability due to a lack of authentication in critical functions of the NoviGest Deskto… ⚡
nvd.nist.gov/vuln/detail/CVE-2026-112197
• [HIGH] CVE-2026-119119 CVE-2026-119119: Crawl4AI before 0.9.5 contains a denial of service vulnerability in the Docker API server … ⚡
nvd.nist.gov/vuln/detail/CVE-2026-119119
• [HIGH] CVE-2026-119120 CVE-2026-119120: Crawl4AI from 0.9.0 before 0.9.5 fails to filter the CosineStrategy model_name field in un… ⚡
nvd.nist.gov/vuln/detail/CVE-2026-119120
• [HIGH] CVE-2026-111734 CVE-2026-111734: P-Net before 1.0.3 does not validate the length of a received Ethernet frame in pf_eth_rec… ⚡
nvd.nist.gov/vuln/detail/CVE-2026-111734
• [HIGH] CVE-2026-119051 CVE-2026-119051: flat through 6.0.1 contains an uncontrolled resource allocation vulnerability in unflatten… ⚡
nvd.nist.gov/vuln/detail/CVE-2026-119051

Full brief: diginpl.com/security/brief
Sources: CISA KEV, NVD (NIST) and security news. DigiNepal links to each source; nothing is rewritten.