Watch FloorSep 29, 8:00 PM to Sep 30, 8:00 PM ET
Daily brief, Wednesday, September 30, 2026
1 newly exploited, 3 new critical CVEs, 1 new breaches.
Breaking
Nothing spreading fast in technology large companies run.
Newly exploited in the wild
New public exploit code
No new Nuclei templates, Metasploit modules, Exploit-DB or VulnCheck XDB entries.
New critical CVEs
- 9.8CVE-2026-76504 Cisco Catalyst SD-WAN ManagerKEVexploit codeDetectionCisco Catalyst SD-WAN Manager contains a hex encoding vulnerability that could allow an unauthenticated, remote attacker to access an affected system with privileges of the admin user due to improper handling of URI encoding in an HTTP request.
- 9.4CVE-2026-93903 Litespeedtech LiteSpeed Web ServerAn attacker can exploit a URL validation vulnerability in LiteSpeed Web Server.
- 9.2CVE-2026-102508 Apache Apache PLC4XAn attacker in a network position between client and server can intercept and manipulate encrypted data in Apache PLC4X.
Ransomware
No leak-site posts collected.
New data breaches
- Medela medela.com423,947 accounts
Watch Floor collects CVE records, CISA KEV, exploit indexes, official advisories, security news and chatter. Ransomware posts are criminal groups' claims, not confirmed by the victims. Breaking stories as RSS or JSON. watchfloor.fyi
Powered by MikeGPT