The U.S. Cybersecurity and Infrastructure Security Agency added four vulnerabilities to its Known Exploited Vulnerabilities catalog, including a set of flaws in Plex Media Server known as Plex2Shell. Security researchers reported that threat actors are chaining these issues to deploy cryptocurrency miners and proxy malware without authentication. CISA also flagged a DLL sideloading bug in Siemens Software Center and a command injection flaw in SiteGuard Server Edition as actively exploited. Federal Civilian Executive Branch agencies must apply fixes for the most critical issues by October 23, 2026, and the remaining patches by November 3, 2026.
Read the full story at thehackernews.com.
Photo: doki7 / Pixabay
