Watch FloorSep 9, 8:00 PM to Sep 10, 8:00 PM ET
Daily brief, Thursday, September 10, 2026
2 newly exploited, 4 new critical CVEs, 1 new breaches.
Breaking
Nothing spreading fast in technology large companies run.
Newly exploited in the wild
New public exploit code
No new Nuclei templates, Metasploit modules, Exploit-DB or VulnCheck XDB entries.
New critical CVEs
- 9.2CVE-2026-86060 MikroTik RouterOSKEVexploit codeAn attacker can change the trusted RouterOS policy mask and escalate privileges on a MikroTik RouterOS.
- 9.9CVE-2026-89049 AWS Amazon SSM AgentAn attacker can bypass authentication controls on an Amazon SSM Agent server with user interaction.
- 9.1CVE-2026-85228 Amazon Deep Java LibraryAn integer overflow in the tensor buffer validation component in Amazon Deep Java Library (DJL) from 0.13.0 through 0.36.0 on all platforms might allow a remote unauthenticated actor to obtain information from adjacent process memory or cause a denial of servi
- 9.6CVE-2026-82107 IBM DataStage on Cloud Pak for DataAn attacker can obtain sensitive information and bypass security restrictions without authentication.
Ransomware
No leak-site posts collected.
New data breaches
- McKesson mckesson.com6,404,340 accounts
Watch Floor collects CVE records, CISA KEV, exploit indexes, official advisories, security news and chatter. Ransomware posts are criminal groups' claims, not confirmed by the victims. Breaking stories as RSS or JSON. watchfloor.fyi
Powered by MikeGPT