Watch FloorSep 10, 8:00 PM to Sep 11, 8:00 PM ET

Daily brief, Friday, September 11, 2026

4 newly exploited, 4 new critical CVEs.

Breaking

Nothing spreading fast in technology large companies run.

Newly exploited in the wild

10.0CVE-2026-85706 GitLab Community Edition and Enterprise EditionCISA KEVDetectionAn attacker can access sensitive files and data outside of the intended repository path on GitLab Community Edition and Enterprise Edition.
9.9CVE-2026-84869 ConnectWise ScreenConnectCISA KEVAn attacker can transfer and execute files through a remote session on ConnectWise ScreenConnect without authentication.
8.1CVE-2026-42016 JFrog ArtifactoryCISA KEVAn attacker can escalate privileges on a JFrog Artifactory server with incorrect authorization.
7.5CVE-2026-42018 JFrog ArtifactoryCISA KEVDetectionAn unauthenticated caller gets access to sensitive resources with JFrog Artifactory.

New public exploit code

No new Nuclei templates, Metasploit modules, Exploit-DB or VulnCheck XDB entries.

New critical CVEs

Ransomware

No leak-site posts collected.

New data breaches

No new breaches published.

Watch Floor collects CVE records, CISA KEV, exploit indexes, official advisories, security news and chatter. Ransomware posts are criminal groups' claims, not confirmed by the victims. Breaking stories as RSS or JSON. watchfloor.fyi