Watch FloorSep 8, 8:00 PM to Sep 9, 8:00 PM ET
Daily brief, Wednesday, September 9, 2026
4 newly exploited, 6 new critical CVEs.
Breaking
Nothing spreading fast in technology large companies run.
Newly exploited in the wild
- 10.0CVE-2026-20079 Cisco Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall ManagementCISA KEVDetectionCisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management contain an authentication Bypass using an alternate path or channel vulnerability that could allow an unauthenticated, remote attacker to bypass a
- 9.3CVE-2026-19490 Citrix NetScalerCISA KEVAn attacker can bypass authentication and gain unauthorized access to the Citrix NetScaler system.
- 8.8CVE-2026-87491 Google Chromium V8CISA KEVAn attacker can execute arbitrary code on a system with Google Chromium V8 installed via a crafted HTML page.
- 7.4CVE-2025-25249 Fortinet Multiple ProductsCISA KEVAn attacker gains remote code execution and denial-of-service capabilities on Fortinet FortiGate, FortiAuthenticator, FortiAnalyzer, FortiManager, and FortiSwitch.
New public exploit code
No new Nuclei templates, Metasploit modules, Exploit-DB or VulnCheck XDB entries.
New critical CVEs
- 10.0CVE-2026-20079 Cisco Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall ManagementKEVexploit codeDetectionCisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management contain an authentication Bypass using an alternate path or channel vulnerability that could allow an unauthenticated, remote attacker to bypass a
- 9.3CVE-2026-19490 Citrix NetScalerKEVexploit codeAn attacker can bypass authentication and gain unauthorized access to the Citrix NetScaler system.
- 9.6CVE-2026-87911 AWS AWS Labs postgres MCP ServerProduct not on watchlist.
- 9.6CVE-2026-87558 Google ChromeA remote attacker can execute arbitrary code outside the sandbox via a crafted HTML page in Google Chrome on Mac.
- 9.6CVE-2026-87474 Google ChromeA remote attacker can execute arbitrary code outside the sandbox via a crafted HTML page in Google Chrome.
- 9.6CVE-2026-87581 Google ChromeA remote attacker leveraging social engineering can execute arbitrary code outside the sandbox via a crafted HTML page in Google Chrome.
Ransomware
No leak-site posts collected.
New data breaches
No new breaches published.
Watch Floor collects CVE records, CISA KEV, exploit indexes, official advisories, security news and chatter. Ransomware posts are criminal groups' claims, not confirmed by the victims. Breaking stories as RSS or JSON. watchfloor.fyi
Powered by MikeGPT