Watch FloorSep 23, 8:00 PM to Sep 24, 8:00 PM ET
Daily brief, Thursday, September 24, 2026
2 newly exploited, 4 new critical CVEs.
Breaking
Nothing spreading fast in technology large companies run.
Newly exploited in the wild
- 10.0CVE-2026-5430 WSO2 Multiple ProductsCISA KEVAn attacker can upload files and execute arbitrary code on multiple WSO2 products.
- 9.1CVE-2026-71362 Adobe Commerce and MagentoCISA KEVDetectionAn attacker can gain unauthorized access to sensitive data and system administration capabilities on Adobe Commerce and Magento.
New public exploit code
No new Nuclei templates, Metasploit modules, Exploit-DB or VulnCheck XDB entries.
New critical CVEs
- 9.1CVE-2026-71362 Adobe Commerce and MagentoKEVexploit codeDetectionAn attacker can gain unauthorized access to sensitive data and system administration capabilities on Adobe Commerce and Magento.
- 10.0CVE-2026-5430 WSO2 Multiple ProductsKEVexploit codeAn attacker can upload files and execute arbitrary code on multiple WSO2 products.
- 10.0CVE-2026-97359 Rejetto hfs2exploit codeDetectionAn attacker can execute code without authentication on HFS2.
- 9.4CVE-2026-93291 Eufy Omni C20An attacker can perform a man-in-the-middle attack and execute arbitrary code on the Omni C20.
Ransomware
No leak-site posts collected.
New data breaches
No new breaches published.
Watch Floor collects CVE records, CISA KEV, exploit indexes, official advisories, security news and chatter. Ransomware posts are criminal groups' claims, not confirmed by the victims. Breaking stories as RSS or JSON. watchfloor.fyi
Powered by MikeGPT