/
← Voltar ao feed
critical government

CISA adds six exploited flaws in Plex Media Server, SiteGuard Server Edition and Siemens Software Center to KEV

1 fonte(s) · 1 atualização(ões) · publicado 20/10/2026 09:00 · coletado há 3 horas

CISA added six vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog based on evidence of active exploitation. Four affect Plex Media Server: CVE-2026-96652 and CVE-2026-96655 (SSRF), CVE-2026-96654 (improper neutralization of encoded URI schemes) and CVE-2026-96656 (external control of file name or path). The other two are CVE-2026-106931, an OS command injection in EG Secure Solutions SiteGuard Server Edition, and CVE-2026-110936, an uncontrolled search path element in Siemens Software Center. CISA calls these vulnerability types a frequent attack vector for malicious cyber actors and a significant risk to the federal enterprise. The alert gives no exploitation details, threat actor attribution, victim information or IOCs.

Technical Details

  • CVE-2026-96652 and CVE-2026-96655: Plex Media Server Server-Side Request Forgery (SSRF).
  • CVE-2026-96654: Plex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page.
  • CVE-2026-96656: Plex Media Server External Control of File Name or Path.
  • CVE-2026-106931: EG Secure Solutions SiteGuard Server Edition OS Command Injection.
  • CVE-2026-110936: Siemens Software Center Uncontrolled Search Path Element.
  • The article does not list affected versions, exploitation methods or the impact of exploitation.

Remediation

  • Under BOD 26-04, Federal Civilian Executive Branch (FCEB) agencies must prioritize rapid remediation of KEV-listed CVEs on publicly exposed assets that grant total control of the asset after exploitation, and may defer lower-risk vulnerabilities.
  • BOD 26-04 also sets basic expectations for when agencies must check whether threat actors compromised a system before the patch was applied.
  • CISA encourages all organizations to adopt risk-based vulnerability management and prioritize KEV Catalog remediation.
  • The article gives no specific patch guidance; consult the Plex, EG Secure Solutions and Siemens vendor advisories.

Linha do tempo

  1. cisa.gov ↗ · pub. 20/10/2026 09:00 · coletado 20/10 18:00 primeiro registro

    CISA adds six exploited flaws in Plex Media Server, SiteGuard Server Edition and Siemens Software Center to KEV

    ler a análise desta fonte

    CISA added six vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog based on evidence of active exploitation. Four affect Plex Media Server: CVE-2026-96652 and CVE-2026-96655 (SSRF), CVE-2026-96654 (improper neutralization of encoded URI schemes) and CVE-2026-96656 (external control of file name or path). The other two are CVE-2026-106931, an OS command injection in EG Secure Solutions SiteGuard Server Edition, and CVE-2026-110936, an uncontrolled search path element in Siemens Software Center. CISA calls these vulnerability types a frequent attack vector for malicious cyber actors and a significant risk to the federal enterprise. The alert gives no exploitation details, threat actor attribution, victim information or IOCs.

    Technical Details

    • CVE-2026-96652 and CVE-2026-96655: Plex Media Server Server-Side Request Forgery (SSRF).
    • CVE-2026-96654: Plex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page.
    • CVE-2026-96656: Plex Media Server External Control of File Name or Path.
    • CVE-2026-106931: EG Secure Solutions SiteGuard Server Edition OS Command Injection.
    • CVE-2026-110936: Siemens Software Center Uncontrolled Search Path Element.
    • The article does not list affected versions, exploitation methods or the impact of exploitation.

    Remediation

    • Under BOD 26-04, Federal Civilian Executive Branch (FCEB) agencies must prioritize rapid remediation of KEV-listed CVEs on publicly exposed assets that grant total control of the asset after exploitation, and may defer lower-risk vulnerabilities.
    • BOD 26-04 also sets basic expectations for when agencies must check whether threat actors compromised a system before the patch was applied.
    • CISA encourages all organizations to adopt risk-based vulnerability management and prioritize KEV Catalog remediation.
    • The article gives no specific patch guidance; consult the Plex, EG Secure Solutions and Siemens vendor advisories.