Watch FloorSep 27, 8:00 PM to Sep 28, 8:00 PM ET
Daily brief, Monday, September 28, 2026
3 new critical CVEs.
Breaking
Nothing spreading fast in technology large companies run.
Newly exploited in the wild
No CVEs added to CISA's known-exploited list.
New public exploit code
No new Nuclei templates, Metasploit modules, Exploit-DB or VulnCheck XDB entries.
New critical CVEs
- 9.1CVE-2026-96760 Authlib AuthlibAuthlib (prior to 1.9.0) contains a signature verification bypass vulnerability. The JsonWebSignature.deserialize_json() method accepts a JSON Serialization JWS object and returns the payload as successfully verified without checking for a signature and withou
- 9.8CVE-2026-101108 Ordasoft vehicle managerAn attacker can inject arbitrary SQL on Ordasoft vehicle manager.
- 9.8CVE-2026-100752 Ordasoft real estate managerAn attacker can inject arbitrary SQL on Ordasoft real estate manager.
Ransomware
No leak-site posts collected.
New data breaches
No new breaches published.
Watch Floor collects CVE records, CISA KEV, exploit indexes, official advisories, security news and chatter. Ransomware posts are criminal groups' claims, not confirmed by the victims. Breaking stories as RSS or JSON. watchfloor.fyi
Powered by MikeGPT