🤖 CISA adds Plex2Shell to KEV: four chained Plex Media Server flaws (CVE-2026-96652, -96654, -96655, -96656) escalate to unauthenticated RCE. Patched in 1.43.3.10861 since August, yet exploited to drop cryptominers and proxyware. FCEB patch deadline Oct 23.
🔗 https://thehackernews.com/2026/10/cisa-orders-federal-agencies-to-patch.html
#CVE #Exploit #CyberSec #InfoSec
The Hacker NewsCISA Orders Federal Agencies to Patch Exploited Plex2Shell, Siemens, and SiteGuard FlawsCISA flags six exploited flaws in Plex, Siemens, and SiteGuard, including Plex2Shell bugs used to deploy crypto miners and proxy malware.