Watch FloorSep 1, 8:00 PM to Sep 2, 8:00 PM ET
Daily brief, Wednesday, September 2, 2026
7 newly exploited, 6 new critical CVEs, 1 new breaches.
Breaking
Nothing spreading fast in technology large companies run.
Newly exploited in the wild
- 10.0CVE-2026-83548 SonicWall SMA1000 AppliancesCISA KEVDetectionAn attacker gains unauthorized access and data access on SonicWall SMA1000 Appliances.
- 10.0CVE-2026-49869 Kestra Kestra OSSCISA KEVDetectionAn unauthenticated attacker gains remote code execution on Kestra OSS.
- 9.8CVE-2026-82329 JFrog ArtifactoryCISA KEVDetectionAn unauthenticated attacker can obtain administrative privileges on JFrog Artifactory.
- 9.3CVE-2026-9586 Sangoma SwitchvoxCISA KEVDetectionAn unauthenticated remote attacker can execute arbitrary SQL statements and gain remote code execution on Sangoma Switchvox.
- 8.8CVE-2026-59822 BerriAI LiteLLMCISA KEVAn attacker can establish an authenticated session on a BerriAI LiteLLM system without authentication.
- 7.8CVE-2026-83549 SonicWall SMA1000 AppliancesCISA KEVAn attacker can execute code remotely on SonicWall SMA1000 Appliances.
- 6.5CVE-2026-48710 Kludex StarletteCISA KEVDetectionAn attacker can inject paths into the host part on Kludex Starlette, potentially leading to authentication bypass.
New public exploit code
No new Nuclei templates, Metasploit modules, Exploit-DB or VulnCheck XDB entries.
New critical CVEs
- 10.0CVE-2026-83548 SonicWall SMA1000 AppliancesKEVexploit codeDetectionAn attacker gains unauthorized access and data access on SonicWall SMA1000 Appliances.
- 9.3CVE-2026-9586 Sangoma SwitchvoxKEVexploit codeDetectionAn unauthenticated remote attacker can execute arbitrary SQL statements and gain remote code execution on Sangoma Switchvox.
- 9.8CVE-2026-82329 JFrog ArtifactoryKEVexploit codeDetectionAn unauthenticated attacker can obtain administrative privileges on JFrog Artifactory.
- 10.0CVE-2026-49869 Kestra Kestra OSSKEVexploit codeDetectionAn unauthenticated attacker gains remote code execution on Kestra OSS.
- 9.8CVE-2026-20274 Cisco Cisco IOS XR Software+1 more CVEs in the same releaseAn attacker gets remote code execution in Cisco IOS XR Software.
Ransomware
No leak-site posts collected.
New data breaches
- Manchester Airports Group magairports.com8,849,657 accounts
Watch Floor collects CVE records, CISA KEV, exploit indexes, official advisories, security news and chatter. Ransomware posts are criminal groups' claims, not confirmed by the victims. Breaking stories as RSS or JSON. watchfloor.fyi
Powered by MikeGPT