Watch FloorSep 7, 8:00 PM to Sep 8, 8:00 PM ET
Daily brief, Tuesday, September 8, 2026
4 newly exploited, 5 new critical CVEs.
Breaking
Nothing spreading fast in technology large companies run.
Newly exploited in the wild
- 10.0CVE-2026-86218 N-able N-centralCISA KEVDetectionAn attacker gains remote code execution on N-able N-central without authentication.
- 10.0CVE-2026-75650 Adobe Commerce and MagentoCISA KEVDetectionAn attacker can execute arbitrary code on Adobe Commerce and Magento.
- 7.8CVE-2026-85880 Microsoft WindowsCISA KEVAn attacker can elevate privileges locally on Microsoft Windows.
- 7.8CVE-2026-81963 Microsoft WindowsCISA KEVA local attacker can escalate privileges to SYSTEM on Microsoft Windows.
New public exploit code
No new Nuclei templates, Metasploit modules, Exploit-DB or VulnCheck XDB entries.
New critical CVEs
- 10.0CVE-2026-86218 N-able N-centralKEVexploit codeDetectionAn attacker gains remote code execution on N-able N-central without authentication.
- 10.0CVE-2026-75650 Adobe Commerce and MagentoKEVexploit codeDetectionAn attacker can execute arbitrary code on Adobe Commerce and Magento.
- 10.0CVE-2026-44756 SAP SE SAP Extended Passport (EPP) ProcessingAn attacker can execute arbitrary code on the SAP Extended Passport server without authentication.
- 9.8CVE-2026-58240 SAP SE SAP NetWeaver (Message Server)An attacker gets data access in SAP NetWeaver (Message Server) without authentication.
- 9.0CVE-2026-85982 Auth0 Auth0 AD/LDAP ConnectorAttackers get remote code execution via stored XSS in Auth0 AD/LDAP Connector.
Ransomware
No leak-site posts collected.
New data breaches
No new breaches published.
Watch Floor collects CVE records, CISA KEV, exploit indexes, official advisories, security news and chatter. Ransomware posts are criminal groups' claims, not confirmed by the victims. Breaking stories as RSS or JSON. watchfloor.fyi
Powered by MikeGPT