Watch FloorSep 24, 8:00 PM to Sep 25, 8:00 PM ET

Daily brief, Friday, September 25, 2026

3 newly exploited.

Breaking

Nothing spreading fast in technology large companies run.

Newly exploited in the wild

8.8CVE-2026-65660 Microsoft SharePointCISA KEVAn attacker executes arbitrary code and remote code execution on Microsoft SharePoint server.
8.1CVE-2026-87902 WordPress CoreCISA KEVDetectionAn attacker can execute arbitrary code on a WordPress Core server without authentication.
6.9CVE-2026-67279 MikroTik RouterOSCISA KEVMikrotik RouterOS contains an improper enforcement of behavioral workflow vulnerability that could allow an unauthenticated client to open a session channel and send an exec request. This vulnerability can be chained to achieve unauthenticated exploitation of

New public exploit code

No new Nuclei templates, Metasploit modules, Exploit-DB or VulnCheck XDB entries.

New critical CVEs

No new CVEs scored 9.0 or higher.

Ransomware

No leak-site posts collected.

New data breaches

No new breaches published.

Watch Floor collects CVE records, CISA KEV, exploit indexes, official advisories, security news and chatter. Ransomware posts are criminal groups' claims, not confirmed by the victims. Breaking stories as RSS or JSON. watchfloor.fyi