Daily brief 2026-11-05: CVE-2026-122051 and what businesses should patch

CVE-2026-122051 (CVE-2026-122051): A flaw has been found in Edimax BR-6208AC 1.32. Affected by this vulnerability is an unkno. Severity CRITICAL, CVSS 9.3, EPSS n/a.

CVE-2026-122302 (CVE-2026-122302): Kyverno before 1.19.2 contains a privilege escalation vulnerability that allows namespace . Severity CRITICAL, CVSS 9.3, EPSS n/a.

CVE-2026-122303 (CVE-2026-122303): Kyverno from 1.17.0 before 1.19.2 contains an authorization bypass vulnerability that allo. Severity CRITICAL, CVSS 9.4, EPSS n/a.

CVE-2026-122304 (CVE-2026-122304): Kyverno from 1.17.0 before 1.19.2 contains an authorization bypass vulnerability that allo. Severity CRITICAL, CVSS 9.4, EPSS n/a.

CVE-2026-122310 (CVE-2026-122310): Kyverno from 1.19.1 before 1.19.2 validates a Policy's context.apiCall urlPath after clean. Severity CRITICAL, CVSS 9.4, EPSS n/a.

CVE-2026-122311 (CVE-2026-122311): Kyverno from 1.16.0 before 1.19.2 fails to validate path segments in the resource argument. Severity CRITICAL, CVSS 9.4, EPSS n/a.

None of today's entries map to our featured business applications, but check your asset list against the vendors above.

Prioritize anything in CISA KEV and anything internet-facing (VPNs, firewalls, web servers, remote-support tools). Confirm patch status across every client tenant, and kill active sessions after patching gateway appliances.

No web-application entries lead today. Keep CMS cores, plugins and themes on auto-update and protect admin logins with MFA.

Ask your IT provider which of these products you run, and get written confirmation they are patched or mitigated.

Enforce MFA, keep tested offline backups, and make sure remote access is not exposed without protection.