Ethical Hacking News
CISA has issued a warning to federal agencies to patch four vulnerabilities in Plex Media Server, Siemens Software Center, and EG Secure Solutions SiteGuard Server Edition, which could be exploited by remote attackers to achieve unauthenticated remote code execution. Federal agencies are urged to apply patches by October 23, 2026, and November 3, 2026, to prevent potential cyber attacks.
Four new vulnerabilities, collectively known as Plex2Shell, have been added to the Known Exploited Vulnerabilities (KEV) catalog with a high risk of remote code execution. CISA has flagged two other vulnerabilities, CVE-2026-110936 and CVE-2026-106931, as actively exploited and urging agencies to apply fixes by October 23, 2026, and November 3, 2026, respectively. CISA is taking a proactive approach to address the vulnerabilities and prevent potential cyber attacks, emphasizing the importance of patching and keeping software systems up to date.
The United States Cybersecurity and Infrastructure Security Agency (CISA) has taken swift action to address a series of critical vulnerabilities in various software systems, warning federal agencies to apply patches to prevent potential cyber attacks. The vulnerabilities, which have been identified as part of the Known Exploited Vulnerabilities (KEV) catalog, pose a significant risk to the security of federal agencies and their systems.
According to a recent report by CISA, four vulnerabilities have been added to the KEV catalog, including four vulnerabilities impacting Plex Media Server, collectively known as Plex2Shell. The vulnerabilities, which have a CVSS score of 5.3, 6.9, 5.3, and 8.6, respectively, are considered high-risk and can be exploited by remote attackers to achieve unauthenticated remote code execution.
The vulnerabilities were discovered by security researcher Zach Main, who reported them to CISA. Main stated that a remote attacker could chain the four vulnerabilities to achieve unauthenticated remote code execution. The issues were addressed in Plex Media Server 1.43.3.10861, which was released on August 3, 2026.
In addition to the Plex2Shell vulnerabilities, CISA has also flagged two other vulnerabilities as actively exploited. One of the vulnerabilities is a DLL sideloading vulnerability in Siemens Software Center (CVE-2026-110936), which has been abused in ClickFix attacks using a platform called Romulus. The second vulnerability is a command injection bug in EG Secure Solutions SiteGuard Server Edition (CVE-2026-106931), which has been confirmed to be exploited by a Japanese company.
CISA is urging Federal Civilian Executive Branch (FCEB) agencies to apply fixes for the CVE-2026-106931, CVE-2026-96656, and CVE-2026-96654 vulnerabilities by October 23, 2026, and the rest by November 3, 2026. The agency is taking a proactive approach to address the vulnerabilities and prevent potential cyber attacks.
The addition of these vulnerabilities to the KEV catalog highlights the importance of patching and keeping software systems up to date. It also underscores the need for federal agencies to stay vigilant and proactive in addressing potential security threats.
In conclusion, CISA's recent report highlights the critical need for federal agencies to apply patches to prevent potential cyber attacks. The vulnerabilities identified in this report pose a significant risk to the security of federal agencies and their systems, and it is essential that agencies take immediate action to address these vulnerabilities.
Related Information:
https://www.ethicalhackingnews.com/articles/URGENT-CISA-Orders-Federal-Agencies-to-Patch-Exploited-Plex2Shell-Siemens-and-SiteGuard-Flaws-to-Prevent-Potential-Cyber-Attacks-ehn.shtml
https://thehackernews.com/2026/10/cisa-orders-federal-agencies-to-patch.html
https://nvd.nist.gov/vuln/detail/CVE-2026-106931
https://www.cvedetails.com/cve/CVE-2026-106931/
https://nvd.nist.gov/vuln/detail/CVE-2026-96656
https://www.cvedetails.com/cve/CVE-2026-96656/
https://nvd.nist.gov/vuln/detail/CVE-2026-96654
https://www.cvedetails.com/cve/CVE-2026-96654/
https://www.microsoft.com/en-us/security/blog/2025/08/21/think-before-you-clickfix-analyzing-the-clickfix-social-engineering-technique/
https://www.hhs.gov/sites/default/files/clickfix-attacks-sector-alert-tlpclear.pdf
https://cvefeed.io/vuln/detail/CVE-2026-106931
https://techjacksolutions.com/scc-intel/eg-secure-solutions-siteguard-server-edition-os-command-injection-vulnerability/
Published: Wed Oct 21 03:05:17 2026 by llama3.2 3B Q4_K_M
