Skip to content

Connecting to feedEurope/Stockholm

SECURITYSecurity

Briefing
Explorer
Statistics
Archive
Methodology

SECURITYSecurity

Daily vulnerability intelligence. Collected from official sources every morning at 07:00 Stockholm time, explained with AI and always linked back to the record.

Sections

Briefing
Explorer
Statistics
Archive
Methodology

Sources

NIST NVD(opens in a new tab)
GitHub Advisory Database(opens in a new tab)
Google OSV(opens in a new tab)
CISA KEV catalog(opens in a new tab)
FIRST EPSS(opens in a new tab)

Principles

Read-only. No accounts, comments or user content.
Verified data and AI analysis are always labelled.
Every fact links to its original source.
Confirm remediation with the vendor's advisory.

Baba Yaga Security · babayagasecurity.netAll times Europe/StockholmFeed status How it works

Feed live/Last successful update 9 Nov 2026, 07:10 CETNext update 07:00/Europe/Stockholm

Briefing
Explorer
Statistics
Archive
Methodology

Search vulnerabilities/

Briefing, Friday, 6 November 2026 · Baba Yaga Security

Archive
Friday, 6 November 2026

BriefingFriday, 6 November 2026

01Most important developments

VerifiedRanked by confirmed exploitation, severity and EPSS.

01CVE-2026-123025CriticalAn OS Command Injection vulnerability was discovered in the Google Cloud DNS validation module of the OPNsense…CVSS 9.4 · EPSS 0.6% chance of exploitation in 30 days

446 new vulnerabilities, 33 rated critical

In this window the pipeline published 446 vulnerabilities from NVD, GitHub Security Advisories and OSV. By CVSS severity: 33 critical, 157 high, 102 medium, 18 low, with 136 not yet scored.

Computed from source dataWindow 5 Nov 07:10 – 6 Nov 07:10 CET

New

446

Vulnerabilities in this window

Critical

33

CVSS 9.0 – 10.0

High

157

CVSS 7.0 – 8.9

Exploited

0

Newly added to CISA KEV

Severity mix

Critical
High
Medium
Low
Unrated

35%23%30%

02

CVE-2026-100109CriticalThe Security For WooCommerce WordPress plugin from 1.0.10 to 1.0.16 does not perform capability checks when creating…CVSS 9.8 · EPSS 0.4% chance of exploitation in 30 days

03CVE-2026-63774CriticalInsufficient input validation in the PowerSYSTEM Center report designer allows an authenticated user to execute…CVSS 9.0 · EPSS 0.3% chance of exploitation in 30 days

04CVE-2026-63017CriticalIncorrect authorization in PowerSYSTEM Center allows a low-privileged, authenticated user to access resources normally…CVSS 9.0 · EPSS 0.3% chance of exploitation in 30 days

05CVE-2026-77596CriticalKubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflowsCVSS 9.6 · EPSS 0.3% chance of exploitation in 30 days

06CVE-2026-119757CriticalBTCPay Server before 2.4.2, including 2.4.2 release candidates, contains an information disclosure vulnerability that…CVSS 9.8 · EPSS 0.5% chance of exploitation in 30 days

07CVE-2026-111494CriticalIncorrect validation of TLS certificates in the MatchPoint Android app due to a TrustManager that accepts any…CVSS 9.1 · EPSS 0.2% chance of exploitation in 30 days

08CVE-2026-111490CriticalInsecure direct object reference (IDOR) vulnerability in the MatchPoint API, which relies on the actingasuser HTTP…CVSS 9.9 · EPSS 0.4% chance of exploitation in 30 days

Previous briefingThursday, 5 November 2026 Next briefingSaturday, 7 November 2026