Skip to content

Connecting to feedEurope/Stockholm

SECURITYSecurity

Briefing
Explorer
Statistics
Archive
Methodology

SECURITYSecurity

Daily vulnerability intelligence. Collected from official sources every morning at 07:00 Stockholm time, explained with AI and always linked back to the record.

Sections

Briefing
Explorer
Statistics
Archive
Methodology

Sources

NIST NVD(opens in a new tab)
GitHub Advisory Database(opens in a new tab)
Google OSV(opens in a new tab)
CISA KEV catalog(opens in a new tab)
FIRST EPSS(opens in a new tab)

Principles

Read-only. No accounts, comments or user content.
Verified data and AI analysis are always labelled.
Every fact links to its original source.
Confirm remediation with the vendor's advisory.

Baba Yaga Security · babayagasecurity.netAll times Europe/StockholmFeed status How it works

Feed live/Last successful update 9 Nov 2026, 07:10 CETNext update 07:00/Europe/Stockholm

Briefing
Explorer
Statistics
Archive
Methodology

Search vulnerabilities/

Briefing, Sunday, 8 November 2026 · Baba Yaga Security

Archive
Sunday, 8 November 2026

BriefingSunday, 8 November 2026

01Most important developments

VerifiedRanked by confirmed exploitation, severity and EPSS.

01CVE-2026-123959CriticalA security flaw has been discovered in TOTOLINK CA300-PoE 6.2c.884CVSS 9.1 · EPSS 0.8% chance of exploitation in 30 days

351 new vulnerabilities, 21 rated critical

In this window the pipeline published 351 vulnerabilities from NVD, GitHub Security Advisories and OSV. By CVSS severity: 21 critical, 81 high, 208 medium, 24 low, with 17 not yet scored.

Computed from source dataWindow 7 Nov 07:10 – 8 Nov 07:10 CET

New

351

Vulnerabilities in this window

Critical

21

CVSS 9.0 – 10.0

High

81

CVSS 7.0 – 8.9

Exploited

0

Newly added to CISA KEV

Severity mix

Critical
High
Medium
Low
Unrated

23%59%

02

CVE-2026-123960CriticalA weakness has been identified in TOTOLINK CA300-PoE 6.2c.884CVSS 9.9 · EPSS 0.8% chance of exploitation in 30 days

03CVE-2026-123958CriticalA vulnerability was identified in TOTOLINK CA300-PoE 6.2c.884CVSS 9.9 · EPSS 0.5% chance of exploitation in 30 days

04CVE-2026-123957CriticalA vulnerability was determined in TOTOLINK CA300-PoE 6.2c.884CVSS 9.9 · EPSS 0.5% chance of exploitation in 30 days

05CVE-2026-121491CriticalThe Fiber Admin WordPress plugin before 4.0.1 does not validate or escape a request header before writing it into a PHP…CVSS 9.0 · EPSS 0.4% chance of exploitation in 30 days

06CVE-2026-123614Criticalimgproxy has integer overflow in imgproxy ICO loader that causes denial of service and may permit remote code execution in github.com/imgproxy/imgproxyCVSS 9.8 · EPSS 0.7% chance of exploitation in 30 days · Affects github.com/imgproxy/imgproxy/v2

07CVE-2026-123551CriticalOpenAM from 14.0.0 before 16.1.4 contains an information disclosure vulnerability that allows unauthenticated attackers…CVSS 10.0 · EPSS 0.4% chance of exploitation in 30 days

08CVE-2026-123550CriticalOpenAM before 16.1.4 contains an authentication bypass vulnerability in its SAML v2.0 service provider that accepts…CVSS 9.8 · EPSS 0.6% chance of exploitation in 30 days

Previous briefingSaturday, 7 November 2026 Next briefingMonday, 9 November 2026