Watch FloorOct 6, 8:00 PM to Oct 7, 8:00 PM ET
Daily brief, Wednesday, October 7, 2026
23 new critical CVEs, 3 new breaches.
Breaking
Nothing spreading fast in technology large companies run.
Newly exploited in the wild
No CVEs added to CISA's known-exploited list.
New public exploit code
No new Nuclei templates, Metasploit modules, Exploit-DB or VulnCheck XDB entries.
New critical CVEs
- 9.8CVE-2026-76268 Splunk Splunk Enterpriseexploit codeDetectionAn unauthenticated attacker can access Splunk Enterprise Patroni REST API.
- 9.8CVE-2026-93674 IBM Langflow OSSexploit codeDetectionAn attacker can execute arbitrary code on IBM Langflow OSS.
- 9.3CVE-2026-102782 Ordasoft.Com OrdaSoft Simple Membership extension for Joomlaexploit codeDetectionJoomla Extension - ordasoft.com - Unauthenticated SQL injection in OrdaSoft Simple Membership < 7.4.0 - site/simplemembership.php dispatches task=checkLoginPass with no authentication or access control check of any kind. The handler reads a login request param
- 9.4CVE-2025-64393 Veeam Backup and ReplicationAn attacker gets remote code execution as SYSTEM on the Veeam Backup & Replication server.
- 10.0CVE-2026-102255 SonicWall SMA1000An attacker can access internal resources without authentication on the SMA1000 Appliance Work Place interface.
- 9.1CVE-2026-76454 Cisco Cisco License On-PremProduct not on watchlist.
- 9.1CVE-2026-20328 Cisco Cisco License On-PremProduct not on watchlist.
- 9.8CVE-2026-76485 Cisco Cisco NX-OS Software+1 more CVEs in the same releaseAn attacker can execute arbitrary code remotely without authentication on Cisco NX-OS Software.
- 9.8CVE-2026-76501 Cisco Cisco NX-OS SoftwareAn attacker can execute arbitrary code remotely without authentication on Cisco NX-OS Software.
- 9.8CVE-2026-76471 Cisco Cisco NX-OS SoftwareAn attacker can execute arbitrary code or cause a denial of service on Cisco NX-OS Software.
- 9.8CVE-2026-76465 Cisco Cisco NX-OS SoftwareAn attacker can exploit a vulnerability in the MPLS feature of Cisco NX-OS Software.
- 10.0CVE-2026-76480 Cisco Cisco License On-Prem+2 more CVEs in the same releaseAn attacker can bypass access control on Cisco License On-Prem without authentication.
- 9.8CVE-2026-76500 Cisco Cisco Application Policy Infrastructure Controller (APIC)+2 more CVEs in the same releaseAn attacker can access Cisco Application Policy Infrastructure Controller (APIC) without authentication.
- 9.8CVE-2026-76459 Cisco Cisco NX-OS Software+1 more CVEs in the same releaseAn attacker can execute arbitrary code remotely without authentication on Cisco NX-OS Software.
- 9.3CVE-2026-59346 VMware VMware WorkstationProduct not on watchlist.
- 9.6CVE-2026-76464 Cisco Cisco Campus Gateway SoftwareAn attacker gets remote code execution in Cisco Campus Gateway Software without authentication or user interaction.
- 9.8CVE-2026-105192 LMCache LMCacheAn attacker can bypass authentication and access LMCache.
Ransomware
No leak-site posts collected.
New data breaches
- Angel One angelone.inFinance6,765,054 accounts
- CyrusOne cyrusone.com373,460 accounts
- Double Counter doublecounter.gg274,922 accounts
Watch Floor collects CVE records, CISA KEV, exploit indexes, official advisories, security news and chatter. Ransomware posts are criminal groups' claims, not confirmed by the victims. Breaking stories as RSS or JSON. watchfloor.fyi
Powered by MikeGPT