NewsThe Hacker News21.10.2026

CISA Orders Federal Agencies to Patch Exploited Plex2Shell, Siemens, and SiteGuard Flaws

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added four vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, including four vulnerabilities impacting Plex Media Server that's collectively called Plex2Shell. The vulnerabilities are listed below - CVE-2026-96652 (CVSS score: 5.3) - Plex Media Server Server-Side Request Forgery (SSRF)

CVE-2026-96652Plex Media Server — Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability
CVE-2026-96652Plex Media Server vor 1.

Other advisories

CriticalCVE-2026-106931EG Secure Solutions SiteGuard Server Edition for: Betriebssystem-Befehlsinjektion
CriticalCVE-2026-106931SiteGuard Server Edition enthält eine Befehls-Injektions-Schwachstelle, die es einem Angreifer ermöglichen könnte, beliebige Betriebssystem-...
HighCVE-2026-61982Jp-secure SiteGuard WP Plugin: Cross-Site-Scripting (XSS)
MediumCVE-2026-27411Vermutbare CAPTCHA-Schwachstelle im "jp-secure" SiteGuard WP Plugin ermöglicht Funktionsumgehung.
MediumCVE-2026-27411Erratbare CAPTCHA-Schwachstelle im jp-secure SiteGuard WP Plugin siteguard ermöglicht Funktionsumgehung.
MediumCVE-2026-27411Guessable CAPTCHA vulnerability in jp-secure SiteGuard WP Plugin siteguard allows Functionality Bypass.This issue affects SiteGuard WP Plugin: from n/a throu…
MediumCVE-2024-37881EG Secure Solutions SiteGuard WP Plugin: Sicherheitslücke
MediumCVE-2024-37881EG Secure Solutions SiteGuard WP Plugin: Sicherheitslücke

Other news entries

Hackers exploit SiteGuard WAF flaw to run commands as adminsNewsBleepingComputer18.10.2026
Angriffswarnungen für Plex Media Server, SiteGuard und Siemens Software CenterNewsheise Security

Source: https://thehackernews.com/2026/10/cisa-orders-federal-agencies-to-patch.html

Linked advisories

More on SiteGuard

Other advisories

Other news entries