Skip to content

Connecting to feedEurope/Stockholm

SECURITYSecurity

Briefing
Explorer
Statistics
Archive
Methodology

SECURITYSecurity

Daily vulnerability intelligence. Collected from official sources every morning at 07:00 Stockholm time, explained with AI and always linked back to the record.

Sections

Briefing
Explorer
Statistics
Archive
Methodology

Sources

NIST NVD(opens in a new tab)
GitHub Advisory Database(opens in a new tab)
Google OSV(opens in a new tab)
CISA KEV catalog(opens in a new tab)
FIRST EPSS(opens in a new tab)

Principles

Read-only. No accounts, comments or user content.
Verified data and AI analysis are always labelled.
Every fact links to its original source.
Confirm remediation with the vendor's advisory.

Baba Yaga Security · babayagasecurity.netAll times Europe/StockholmFeed status How it works

Feed live/Last successful update 9 Nov 2026, 07:10 CETNext update 07:00/Europe/Stockholm

Briefing
Explorer
Statistics
Archive
Methodology

Search vulnerabilities/

Briefing, Monday, 9 November 2026 · Baba Yaga Security

Archive
Monday, 9 November 2026

BriefingMonday, 9 November 2026

01Most important developments

VerifiedRanked by confirmed exploitation, severity and EPSS.

01CVE-2026-114432CriticalThe Contact Form 7 WordPress plugin before 6.2.4 does not validate the type or extension of files uploaded through a…CVSS 9.8 · EPSS 0.2% chance of exploitation in 30 days

223 new vulnerabilities, 21 rated critical

In this window the pipeline published 223 vulnerabilities from NVD, GitHub Security Advisories and OSV. By CVSS severity: 21 critical, 67 high, 121 medium, 14 low.

Computed from source dataWindow 8 Nov 07:10 – 9 Nov 07:10 CET

New

223

Vulnerabilities in this window

Critical

21

CVSS 9.0 – 10.0

High

67

CVSS 7.0 – 8.9

Exploited

0

Newly added to CISA KEV

Severity mix

Critical
High
Medium
Low
Unrated

9%30%54%

02

CVE-2026-113364CriticalBuffer Overflow in the data receiving process in NEC Corporation WebSAM WinShare Ver 7.5.0 and earlier, Ver 7.6.0 and…CVSS 9.3

03CVE-2026-113363CriticalImproper Input Validation in the network communication processing in NEC Corporation WebSAM WinShare Ver 7.2.0 through…CVSS 9.3

04CVE-2026-124560CriticalA vulnerability was found in D-Link DIR-878 1.20B05CVSS 9.8

05CVE-2026-119506CriticalIncorrect Privilege Assignment vulnerability in DynamiApps Frontend Admin by DynamiApps acf-frontend-form-element…CVSS 9.1

06CVE-2026-6715CriticalIBM Concert 1.0 through 3.0.1.1 allows an attacker can supply crafted input that is incorporated into an operating…CVSS 9.8

07CVE-2026-17466CriticalIBM Optim 1.0.0, 1.1.0, and 1.2.0 could allow a remote authenticated attacker to obtain sensitive information due to…CVSS 9.1

08CVE-2026-15266CriticalIBM Concert 1.0 through 3.0.1.1 contains components that allow potentially unsafe command execution, which could be…CVSS 9.8

Previous briefingSunday, 8 November 2026

Next briefingThis is the latest briefing