CISA Orders Patch for Exploited Plex2Shell, Siemens and SiteGuard Flaws
CISA added four Plex2Shell vulnerabilities and two other exploited flaws to its KEV catalog, ordering federal agencies to patch them by October 23 and November 3, 2026.
CISA added four Plex2Shell vulnerabilities and two other exploited flaws to its KEV catalog, ordering federal agencies to patch them by October 23 and November 3, 2026.
The entries cover four Plex Media Server bugs, SiteGuard command injection, and a Siemens path flaw.
Federal agencies must mitigate EG Secure Solutions SiteGuard Server Edition by October 23, 2026; ransomware use is unknown.
Save SiteGuard diagnostic data before upgrading; JVN confirmed in-the-wild use but published no attacker indicators.
CVE-2026-106931 is in the default statistics function; fixed builds are 8.00 Update 5 and 7.00 Update 6.
A local low-privilege user can run commands as root or SYSTEM through the default statistics feature; patched builds are out.
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.
Today 42 readers · 42 views · 34 reads · all time 158K views