CVE-2026-35616

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

April 6, 2026

Last Seen

June 11, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

JDY Botnet Grows to 1,500 Devices for Rapid Vulnerability Mapping75.5

The JDY botnet, linked to Chinese state-sponsored actors, has expanded to over 1,500 compromised small office and IoT devices, primarily in the U.S. and Brazil. This botnet scans for newly disclosed vulnerabilities within hours, feeding targeting data to state hackers. Initially part of the KV-botne...

Critical RCE Vulnerabilities Discovered in Fortinet Products72.8

Fortinet has identified multiple critical vulnerabilities in its FortiSandbox and FortiAuthenticator products, which could allow unauthenticated attackers to execute arbitrary code remotely. The vulnerabilities are tracked as CVE-2026-44277 and CVE-2026-26083, both published on May 12, 2026. FortiAu...

Fortinet Issues Security Advisory for Critical Vulnerabilities72.0

On March 10, 2026, Fortinet released a security advisory addressing eleven vulnerabilities in its core products, including a high-severity stack-based buffer overflow in FortiManager (CVE-2025-54820) that allows remote unauthenticated attackers to execute unauthorized commands. The vulnerabilities a...

Malicious npm Packages Exploit Strapi CMS, Compromise Credentials66.9

Researchers from SafeDep have identified 36 malicious npm packages disguised as Strapi CMS plugins, which facilitate Redis and PostgreSQL exploitation, reverse shell injections, and credential harvesting. These packages employ a postinstall script hook to execute malicious code without user interact...