31 High-Impact Vulnerabilities Exploited in March as Interlock Hits Cisco FMC Zero-Day

**Executive Summary:** Recorded Future tracked 31 high-impact vulnerabilities actively exploited in March 2026, highlighted by a Cisco Secure Firewall Management Center zero-day (CVE-2026-20131) exploited by the Interlock Ransomware Group to achieve root-level code execution and stage an ELF payload (37.27.244.222); the report enumerates affected CVEs, public PoC availability, linked malware (including DarkSword and GHOST* families), and observed TTPs such as RATs, memory-resident web shells, lateral movement, and eventual ransomware deployment.