Watch FloorSep 17, 8:00 PM to Sep 18, 8:00 PM ET
Daily brief, Friday, September 18, 2026
3 newly exploited, 4 new critical CVEs.
Breaking
Nothing spreading fast in technology large companies run.
Newly exploited in the wild
- 9.8CVE-2025-39682 Linux KernelCISA KEVA zero-length record can bypass intended TLS record-type handling in the Linux Kernel.
- 8.8CVE-2026-53266 Linux KernelCISA KEVAn attacker can execute arbitrary code on a Linux system with kernel access.
- 7.8CVE-2025-39964 Linux KernelCISA KEVA race condition in Linux Kernel allows concurrent writes to the same AF_ALG socket.
New public exploit code
No new Nuclei templates, Metasploit modules, Exploit-DB or VulnCheck XDB entries.
New critical CVEs
- 9.8CVE-2025-39682 Linux KernelKEVexploit codeA zero-length record can bypass intended TLS record-type handling in the Linux Kernel.
- 9.3CVE-2026-75885 Red Hat Red Hat OpenShift Container Platform 4.12A flaw was found in the OpenShift console. Unauthenticated access to the `/api/devfile/` and `/api/devfile/samples/` endpoints allows a remote attacker to send crafted devfile payloads. This can lead to Server-Side Request Forgery (SSRF), where the console pod
- 9.8CVE-2026-13639 Synology DiskStation Manager (DSM)A remote attacker can read or write arbitrary files without authentication to the DiskStation Manager (DSM) system.
- 9.8CVE-2026-13684 Synology DiskStation Manager (DSM)A remote attacker can read arbitrary data without authentication to the DiskStation Manager (DSM) system.
Ransomware
No leak-site posts collected.
New data breaches
No new breaches published.
Watch Floor collects CVE records, CISA KEV, exploit indexes, official advisories, security news and chatter. Ransomware posts are criminal groups' claims, not confirmed by the victims. Breaking stories as RSS or JSON. watchfloor.fyi
Powered by MikeGPT