cves:CVE-2026-106931 × criticity:critical × limpar

Resultados

2 casos · pág. 1/1

securityaffairs.com · há 1d · 3 fontes · 3 atualizações critical

SiteGuard Server Edition WAF flaw CVE-2026-106931 exploited in the wild for root/SYSTEM command execution

EG Secure Solutions warns that CVE-2026-106931, an OS command injection flaw in the statistics function of SiteGuard Server Edition, a Japanese host-based WAF, is being exploited in the wild. Successful exploitation lets an attacker run commands as root or SYSTEM on the server hosting the product. The flaw is rated CVSS 4.0 8.5 and CVSS 3…

CVE-2026-106931

thehackernews.com · há 8h · 4 fontes · 5 atualizações critical

Plex2Shell: Plex Media Server exploit chain exploited within a day of PoC to drop XMRig and myawesomeproxy; CISA adds four CVEs to KEV

Attackers began exploiting Plex2Shell, a chain of four Plex Media Server vulnerabilities (CVE-2026-96652, CVE-2026-96654, CVE-2026-96655, CVE-2026-96656), on October 17, 2026. That was about a day after researcher Zach Main published a write-up and PoC on October 16. The chain gives unauthenticated remote code execution with the privilege…

CVE-2026-96652 CVE-2026-96654 CVE-2026-96655 government