~Cisa~
CISA added CVE-2026-19868, a SonicWall SonicOS SSLVPN single-factor authentication flaw, to its KEV catalog following active exploitation, requiring federal agencies...
-
IOCs: CVE-2026-19868
-
#AuthenticationBypass #ExploitedVulnerability #ThreatIntel #Vulnerability

~Recordedfuture~
Insikt Group's October 2026 review flags 82 high-impact CVEs, 69 actively exploited, including PHP2Shell chained with Fragnesia for root and SharePoint ToolShell...
-
IOCs: CVE-2015-3306, CVE-2015-5477
-
#ExploitedVulnerability #Ransomware #ThreatIntel #Vulnerability

~Cisa~
CISA added CVE-2024-27834, an Apple improper authentication flaw, to the KEV Catalog due to active exploitation; patch immediately.
-
IOCs: CVE-2024-27834
-
#ExploitedVulnerability #SecurityAdvisory #ThreatIntel #Vulnerability

@crowdstrike.com
Static Kitten deployed a modified CVE-2024-55591 exploit with 13 hardcoded payloads to create backdoor admin accounts on FortiOS devices, enabling persistent root access.
-
IOCs: 157[.]20[.]182[.]49
-
#CyberEspionage #ExploitedVulnerability #ThreatIntel #Vulnerability

@sekoia.io
PHP2Shell critical PHP core vulnerabilities were exploited four days before the October 21 patch, with ~1.3 million vulnerable hosts and AI-accelerated discovery becoming the new...
-
IOCs: CVE-2026-111497
-
#ExploitedVulnerability #ThreatIntel #Vulnerability #ZeroDay

@elastic.co
CVE-2026-73570 is an unauthenticated command injection in Zimbra Collaboration via malformed SMTP RCPT TO, yielding RCE as the zimbra user; patch to 10.1.20+.
-
IOCs: CVE-2026-73570
-
#ExploitedVulnerability #RemoteCodeExecution #ThreatIntel #Vulnerability

@elastic.co
Two critical unauthenticated PHP core RCE flaws (CVE-2026-109618, CVE-2026-109619) enable remote attackers to execute code via web requests; patches...
-
IOCs: CVE-2026-109618, CVE-2026-109619
-
#ExploitedVulnerability #RemoteCodeExecution #ThreatIntel #Vulnerability

~Cisa~
CISA added CVE-2026-119977, a WordPress Core TOCTOU race condition vulnerability, to the KEV Catalog due to active exploitation.
-
IOCs: CVE-2026-119977
-
#ExploitedVulnerability #SecurityAdvisory #ThreatIntel #Vulnerability

Feed: "I Write Her"
By: Susi Bocks on Thursday, March 12, 2026

Ripe For The Picking iwriteher.com/2026/03/12/r...