CISA 2026-10-20

CISA KEV — Plex Media Server (CVE-2026-96652) +5 more

Machine-generated analysis · WAYSCloud LLM

Four of the six newly cataloged KEV entries affect Plex Media Server.

Context

The advisory lists Plex Media Server, EG Secure Solutions SiteGuard Server Edition, and Siemens Software Center as the products with newly added KEV entries. CISA states these vulnerabilities are actively exploited and should be prioritized for remediation on publicly exposed assets. Four of the six entries involve different SSRF-related flaws in Plex Media Server.

Operator considerations

Check: Identify any publicly exposed instances of Plex Media Server, SiteGuard Server Edition, or Siemens Software Center.
Isolate: Segment or restrict network access to those services until they are remediated.
Patch: Apply vendor-provided patches or mitigations for CVE-2026-96652, -96654, -96655, -96656, -106931, and -110936.
Log: Monitor logs for SSRF, OS command injection, or uncontrolled search path activity associated with these CVEs.

From Cybersecurity and Infrastructure Security Agency ↗

CISA has added six new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.

CVE-2026-96652 Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability

CVE-2026-96654 Plex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page Vulnerability

CVE-2026-96655 Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability

CVE-2026-96656 Plex Media Server External Control of File Name or Path Vulnerability

CVE-2026-106931 EG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerability

CVE-2026-110936 Siemens Software Center Uncontrolled Search Path Element Vulnerability

These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risks to the federal enterprise.

Binding Operational Directive (BOD) 26-04: Prioritizing Security Updat...

Read the full advisory on CISA →