Watch FloorSep 21, 8:00 PM to Sep 22, 8:00 PM ET

Daily brief, Tuesday, September 22, 2026

4 newly exploited, 4 new critical CVEs, 1 new breaches.

Breaking

Nothing spreading fast in technology large companies run.

Newly exploited in the wild

10.0CVE-2026-93952 Arista VeloCloud OrchestratorCISA KEVAn attacker can access privileged functionality on an Arista VeloCloud Orchestrator host.
9.8CVE-2026-85102 Check Point Multiple ProductsCISA KEVAn unauthenticated remote attacker can execute arbitrary code on Check Point Security Gateway.
9.8CVE-2026-93616 Check Point Multiple ProductsCISA KEVDetectionAn unauthenticated attacker can upload and execute arbitrary scripts on Check Point Security Management Server.
9.8CVE-2026-94127 F5 BIG-IP APMCISA KEVDetectionAffected: F5 BIG-IP Application Security Manager (ASM) and Access Policy Manager (APM) modules. Attacker gains: Remote code execution and system compromise. Recommended action: Immediately apply the latest available patches or hotfixes provided by F5 for the a

New public exploit code

No new Nuclei templates, Metasploit modules, Exploit-DB or VulnCheck XDB entries.

New critical CVEs

Ransomware

No leak-site posts collected.

New data breaches

LimeLeads limeleads.com17,838,396 accounts

Watch Floor collects CVE records, CISA KEV, exploit indexes, official advisories, security news and chatter. Ransomware posts are criminal groups' claims, not confirmed by the victims. Breaking stories as RSS or JSON. watchfloor.fyi