https://cybersecuritytracker.ai/?stack=1Stories and vulnerabilities involving Plex.Wed, 04 Nov 2026 23:52:49 GMThttps://cisa.gov/news-events/alerts/2026/10/20/cisa-adds-six-known-exploited-vulnerabilities-catalogcst-10824CISA added six vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog on October 20, 2026, after confirming active exploitation. The affected products include Plex Media Server (four vulnerabilities spanning SSRF, path traversal, and URI neutralization flaws), EG Secure Solutions SiteGuard Server Edition, and Siemens Software Center. Binding Operational Directive 26-04 now requires U.S. federal agencies to prioritize patching high-risk KEV Catalog vulnerabilities on publicly exposed assets, with agencies also required to check for pre-patch compromise. Grouped because: shared entities: CVE-2026-96652, KNOWN EXPLOITED VULNERABILITIES Sources: CISA Alerts and Advisories, The Hacker News.Tue, 20 Oct 2026 12:00:00 GMT