criticity:critical × latest_source_host:securityaffairs.com × limpar

Resultados

2 casos · pág. 1/1

securityaffairs.com · há 1d · 3 fontes · 3 atualizações critical

SiteGuard Server Edition WAF flaw CVE-2026-106931 exploited in the wild for root/SYSTEM command execution

EG Secure Solutions warns that CVE-2026-106931, an OS command injection flaw in the statistics function of SiteGuard Server Edition, a Japanese host-based WAF, is being exploited in the wild. Successful exploitation lets an attacker run commands as root or SYSTEM on the server hosting the product. The flaw is rated CVSS 4.0 8.5 and CVSS 3…

CVE-2026-106931

securityaffairs.com · há 1d · 3 fontes · 3 atualizações critical

Plex2Shell exploit chain used to turn vulnerable Plex Media Servers into crypto miners and proxy nodes

Attackers began exploiting Plex2Shell, a chain of four Plex Media Server vulnerabilities, within about a day of researcher Zach Main publishing technical details and PoC code on October 16, 2026. A researcher running an internet-facing honeypot observed the first in-the-wild exploitation on October 17. The attackers deployed an XMRig-base…

CVE-2026-96652 CVE-2026-96654 CVE-2026-96655