CVE of the day — CVE-2026-16117 (CVSS 10,0, critical)?Procedurally generated video from real data from official public sources. Backgrounds are abstract AI-generated images and the narration is a synthetic voice (TTS). No real event is filmed or altered.

CVE-2026-16117: Critical gravity, CVSS score 10,0 out of 10 according to the National Vulnerability Database.

Impact: @fastify/http-proxy versions up to and including 11.5.0 fail to rewrite the request prefix when the prefix segment is URL-encoded. Fastify's router URL-decodes paths for route matching, but request.url retains..

Remotely exploitable Vulnerability, without privileges, without user interaction. Apply the update of the supplier promptly and consult the official notice on NVD.