Watch FloorOct 5, 8:00 PM to Oct 6, 8:00 PM ET
Daily brief, Tuesday, October 6, 2026
10 new critical CVEs.
Breaking
Nothing spreading fast in technology large companies run.
Newly exploited in the wild
No CVEs added to CISA's known-exploited list.
New public exploit code
No new Nuclei templates, Metasploit modules, Exploit-DB or VulnCheck XDB entries.
New critical CVEs
- 9.6CVE-2026-106358 Google ChromeProduct not on watchlist.
- 9.6CVE-2026-106211 Google ChromeProduct not on watchlist.
- 9.6CVE-2026-106329 Google ChromeProduct not on watchlist.
- 9.6CVE-2026-106417 Google ChromeAn attacker gets remote code execution in Google Chrome without authentication or user interaction.
- 9.6CVE-2026-106234 Google ChromeAn attacker gets remote code execution in Google Chrome without authentication or user interaction.
- 9.1CVE-2026-106294 Google ChromeProduct not on watchlist.
- 9.0CVE-2026-105812 Aws bedrock-agentcore-starter-toolkitAn authenticated same-account actor can execute arbitrary code in the Amazon Bedrock AgentCore Starter Toolkit.
- 9.3CVE-2026-39746 Booknetic BookneticAn attacker can inject malicious SQL queries, allowing database access, in Booknetic.
- 9.3CVE-2026-32557 BookingWP WooCommerce AppointmentsAn attacker gets SQL injection by exploiting a vulnerability in WooCommerce Appointments.
- 9.3CVE-2026-39795 Brewlabs SendPress NewslettersAn attacker can inject malicious SQL queries, allowing database access, in SendPress Newsletters.
Ransomware
No leak-site posts collected.
New data breaches
No new breaches published.
Watch Floor collects CVE records, CISA KEV, exploit indexes, official advisories, security news and chatter. Ransomware posts are criminal groups' claims, not confirmed by the victims. Breaking stories as RSS or JSON. watchfloor.fyi
Powered by MikeGPT