CISA Adds Six Known Exploited Vulnerabilities to Catalog

CISA Adds Six Known Exploited Vulnerabilities to Catalog | CISA

Cybersecurity and Infrastructure Security Agency CISA·ggaylor·5 days ago

#cybersecurity #cisa #vulnerability #vulnerabilities #server

Reading 0:00

15s threshold

CISA has added six new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation.

CVE-2026-96652 Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability

CVE-2026-96654 Plex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page Vulnerability

CVE-2026-96655 Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability

CVE-2026-96656 Plex Media Server External Control of File Name or Path Vulnerability

CVE-2026-106931 EG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerability

CVE-2026-110936 Siemens Software Center Uncontrolled Search Path Element Vulnerability

These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risks to the federal enterprise.

Binding Operational Directive (BOD) 26-04: Prioritizing Security Updates Based on Risk establishes vulnerability management requirements for Federal Civilian Executive Branch (FCEB) agencies.…

Continue reading — create a free account

Join HashtagPLUS to read full articles, follow hashtags, vote, and join the conversation.

Create free account Log in

Menu

CISA Adds Six Known Exploited Vulnerabilities to Catalog | CISA