CISA Orders Federal Agencies to Patch Exploited Plex2Shell, Siemens, and Site Guard Flaws
Summary: CISA added four Plex Media Server vulnerabilities, collectively called Plex2Shell, to its Known Exploited Vulnerabilities catalog on Tuesday; researcher Zach Main found the flaws can be chained for unauthenticated remote code execution, and they were fixed in Plex Media Server 1.43.3.10861 on August 3, 2026. CISA also flagged a DLL sideloading flaw in Siemens Software Center (CVE-2026-110936, CVSS 8.4) abused in ClickFix attacks using a platform called Romulus, and a command injection bug in EG Secure Solutions SiteGuard Server Edition (CVE-2026-106931, CVSS 8.5) that the Japanese company confirmed as exploited.
Bottom line: Threat actors are already using the Plex2Shell flaws to deploy cryptocurrency miners and proxy malware, and FCEB agencies have until October 23, 2026 to fix CVE-2026-106931, CVE-2026-96656, and CVE-2026-96654, with the rest due by November 3, 2026.
Read the original at The Hacker News ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2026-106931CVE-2026-110936CVE-2026-96654CVE-2026-96656
- Related
- CVE-2026-110936: Siemens Software Center Uncontrolled Search Path Element Vulnerability Known Exploited Vulnerabilities · Oct 20, 2026CVE-2026-96654: Plex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page Vulnerability Known Exploited Vulnerabilities · Oct 20, 2026CVE-2026-96656: Plex Media Server External Control of File Name or Path Vulnerability Known Exploited Vulnerabilities · Oct 20, 2026