March 2026 CVE Landscape: 31 High-Impact Vulnerabilities Identified, Interlock Ransomware Group Exploits Cisco FMC Zero
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2017-7921 | Improper Authentication Bypass in Multiple Hikvision Products | 9.8 | 100% | KEVPoC | KEV |
| CVE-2021-30952 | CVE-2021-30952: Integer Overflow in Apple Safari/WebKit Allows Arbitrary Code Execution | 7.8 | 7% | KEVPoC | KEV |
| CVE-2023-41974 | Use-After-Free Kernel Code Execution Flaw in Apple iOS and iPadOS | 7.8 | 2% | KEVPoC | KEV |
| CVE-2025-26399 | Unauthenticated Deserialization RCE in SolarWinds Web Help Desk | 9.8 | 90% | KEVRansomware | KEV |
| CVE-2025-32432 | Code Injection Enables Remote Code Execution in Craft CMS | 10.0 | 100% | KEVPoC ×3 | KEV |
| CVE-2025-54068 | Unauthenticated Code Injection RCE in Laravel Livewire v3 | 9.2 | 96% | KEVPoC | KEV |
| CVE-2025-68613 | Authenticated RCE in n8n Workflow Automation Expression Evaluation | 8.8 | 99% | KEVPoC ×2 | KEV |
| CVE-2026-20131 | Unauthenticated Java Deserialization RCE in Cisco FMC and SCC | 10.0 | 44% | KEVRansomwarePoC | KEV |
| CVE-2026-20963 | Deserialization RCE in Microsoft SharePoint Exploited in the Wild | 9.8 | 29% | KEV | KEV |
| CVE-2026-27483 | MindsDB: There is a path traversal vulnerability in Mindsdb's /api/files interface, which an authenticated attacker can exploit to achieve… | 8.8 | 11% | PoC | |
| CVE-2026-27944 | Unauthenticated Backup Download and Key Disclosure in Nginx UI | 9.8 | 23% | PoC ×2 | |
| CVE-2026-33017 | Unauthenticated RCE in Langflow AI Workflow Builder | 9.3 | 96% | KEVPoC ×6 | KEV |
| CVE-2026-3910 | Out-of-Bounds Memory Flaw in Google Chrome V8 Allows Sandboxed Code Execution | 8.8 | 3% | KEV | KEV |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| ipv4 | 37.27.244.222 | tors deploy a malicious ELF binary from a staging server at 37[.]27[.]244[.]222 ( Intelligence Card ) to support follow-on operations |
| sha256 | 6c8efbcef3af80a574cb2aa2224c145bb2e37c2f3d3f091571708288ceb22d5f | ion. Insikt Group® obtained a screen locker sample (SHA256: 6c8efbcef3af80a574cb2aa2224c145bb2e37c2f3d3f091571708288ceb22d5f ) shared by Amazon Threat Intelligence from Recorded Future |
From the original article
8 min read at recordedfuture.com
In March 2026, Insikt Group® identified 31 high-impact vulnerabilities that should be prioritized for remediation , 29 of which had a Very Critical Recorded Future Risk Score.
By Recorded Future® · recordedfuture.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.