importantSYS.SOURCE: The Hacker News• 2026-10-21T12:56:49+05:30

CISA Mandates Patches for Exploited Plex2Shell, Siemens, and SiteGuard Vulnerabilities

#vulnerability #cybersecurity #policy

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added four vulnerabilities to its KEV catalog, including the Plex2Shell vulnerability CVE-2026-96652, which has a CVSS score of 5.3 and involves a Server-Side Request Forgery (SSRF) in Plex Media Server.

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added four vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, including four vulnerabilities impacting Plex Media Server that's collectively called Plex2Shell.

The vulnerabilities are listed below -

CVE-2026-96652 (CVSS score: 5.3) - Plex Media Server Server-Side Request Forgery (SSRF)

Read original article

*** END OF TRANSMISSION ***

> EMUDHRA'S CERTIFICATE AUTHORITY KEYS COMPROMISED DUE TO WEAK CRYPTOGRAPHIC IMPLEMENTATION > UNEP EMISSIONS GAP REPORT 2026: 1.5°C PARIS AGREEMENT TARGET UNACHIEVABLE > CRITICAL PHP RCE VULNERABILITIES (CVSS 9.2) PROMPT EMERGENCY SECURITY RELEASE > UNAUTHORIZED ACCESS TO UPDRAFTCENTRAL KEYS ENABLES BACKDOOR EXPLOITS ON WORDPRESS SITES > U.S. FEDERAL AGENCIES ORDERED TO REMOVE DEEPSEEK PRODUCTS AND HALT NEW ACQUISITIONS > STATE BANK OF INDIA DISCLOSES DATA LEAK INVOLVING 3,897 CUSTOMER RECORDS ON DARK WEB > CISA MANDATES PATCHES FOR EXPLOITED PLEX2SHELL, SIEMENS, AND SITEGUARD VULNERABILITIES > VASILEK BACKDOOR DISCOVERED IN VMWARE TOOLS VIA 2-YEAR RUSSIAN HEALTHCARE BREACH > PILLOWFORT PLATFORM TO CEASE OPERATIONS ON DECEMBER 4, 2026 > BATTLEZONE ONLINE: BROWSER-BASED 3D MULTIPLAYER TANK GAME WITH BZFLAG COMPATIBILITY> EMUDHRA'S CERTIFICATE AUTHORITY KEYS COMPROMISED DUE TO WEAK CRYPTOGRAPHIC IMPLEMENTATION > UNEP EMISSIONS GAP REPORT 2026: 1.5°C PARIS AGREEMENT TARGET UNACHIEVABLE > CRITICAL PHP RCE VULNERABILITIES (CVSS 9.2) PROMPT EMERGENCY SECURITY RELEASE > UNAUTHORIZED ACCESS TO UPDRAFTCENTRAL KEYS ENABLES BACKDOOR EXPLOITS ON WORDPRESS SITES > U.S. FEDERAL AGENCIES ORDERED TO REMOVE DEEPSEEK PRODUCTS AND HALT NEW ACQUISITIONS > STATE BANK OF INDIA DISCLOSES DATA LEAK INVOLVING 3,897 CUSTOMER RECORDS ON DARK WEB > CISA MANDATES PATCHES FOR EXPLOITED PLEX2SHELL, SIEMENS, AND SITEGUARD VULNERABILITIES > VASILEK BACKDOOR DISCOVERED IN VMWARE TOOLS VIA 2-YEAR RUSSIAN HEALTHCARE BREACH > PILLOWFORT PLATFORM TO CEASE OPERATIONS ON DECEMBER 4, 2026 > BATTLEZONE ONLINE: BROWSER-BASED 3D MULTIPLAYER TANK GAME WITH BZFLAG COMPATIBILITY