The CVE Watchtower: Weekly Threat Intelligence Briefing (March 23 – March 29, 2026)

Weekly vulnerability roundup (Mar 23–29, 2026) reporting 1,740 new CVEs including 147 critical and dozens of high-severity flaws; calls out three CISA KEV additions — F5 BIG-IP APM (CVE-2025-53521), Langflow (CVE-2026-33017), and a Trivy supply-chain compromise (CVE-2026-33634) — plus active exploitation of the Kali Forms WordPress plugin (CVE-2026-3584) and several CVSS 10.0 sandbox-escape vulnerabilities; recommends immediate remediation of KEV-listed items, auditing public-facing WordPress instances, and strengthening DevSecOps integrity checks.