CISA Orders Federal Agencies to Patch Exploited Plex2Shell, Siemens, and SiteGuard Flaws

16 hours ago [email protected] (The Hacker News)

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added four vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, including four vulnerabilities impacting Plex Media Server that’s collectively called Plex2Shell.

The vulnerabilities are listed below –

CVE-2026-96652 (CVSS score: 5.3) – Plex Media Server Server-Side Request Forgery (SSRF)

The post “CISA Orders Federal Agencies to Patch Exploited Plex2Shell, Siemens, and SiteGuard Flaws” appeared first on The Hacker News

Source:The Hacker News – [email protected] (The Hacker News)

Tags: Hacker, Hacker News, Vulnerability

Critical GitLab Flaw (CVSS 10.0) Could Allow Unauthenticated RCE Across 12 Years of Releases

5 hours ago [email protected] (The Hacker News)

Cyber Attacks

LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and Backdoor

6 hours ago [email protected] (The Hacker News)

PHP Issues Emergency Patches for Two Critical PHP2Shell RCE Flaws as Exploit Attempts Emerge

10 hours ago [email protected] (The Hacker News)

Cyber Attacks

China-Aligned Bronze Sandcastle Abuses Sandboxie DLL Sideloading to Deploy Backdoors

12 hours ago [email protected] (The Hacker News)

PHP2Shell: Two Unpatched Critical PHP RCE Flaws (CVSS 9.2) Trigger Emergency Security Alert

19 hours ago [email protected] (The Hacker News)

Critical FortiSIEM Flaw Gets Public Exploit PoC for Unauthenticated Remote Code Execution

1 day ago [email protected] (The Hacker News)