Fake PoCs, Misunderstood Risks Cause Cisco SD-WAN Chaos

This DarkReading digest aggregates mid-March 2026 coverage highlighting a surge in high-impact vulnerabilities and active exploitation, plus broader threat trends. Notable items: a Qualcomm Android zero-day (CVE-2026-21385) is being actively exploited; a command‑injection flaw in VMware Aria Operations is under exploitation putting cloud resources at risk; Cisco released dozens of firewall/edge fixes including multiple critical CVSS‑10 issues (some PoCs and proof‑of‑concept claims spawned fraud and confusion); Microsoft’s March patch batch addressed 83 CVEs; a GitHub Actions supply‑chain/tag‑p