CISA Flags Six Exploited Flaws Across Plex, Siemens and SiteGuard Products
CISA added six flaws in Plex Media Server, Siemens Software Center and SiteGuard Server Edition to its KEV catalog citing exploitation evidence.
Vulnerabilities
More news
Page 2 / 39 · 345 articles
Public Plex2Shell Exploit Used to Compromise Exposed Plex Media Servers
Researchers observed public Plex2Shell exploit used against a Plex honeypot to deploy XMRig miner and proxy software, per single-server data.
October 2026 Windows Server Updates Can Disrupt Exchange OWA and Mail Flow
Microsoft says October 2026 Windows Server updates can disrupt Exchange OWA sign-in and mail flow, with temporary registry workaround pending a fix.
Broadcom Wi-Fi flaw reportedly lets nearby attackers seize routers without passwords
Reported Broadcom Wi-Fi flaw may let nearby attackers run code without password via WPS EAP, per researcher tests on Belgian routers.
SiteGuard WAF flaw CVE-2026-106931 is under active exploitation
SiteGuard WAF flaw under active exploitation via statistics feature, risking root or SYSTEM command execution.
BlockStrap Flaw Exposes Magento and Adobe Commerce Servers to Code Execution
Sansec reports BlockStrap template flaw could let unauthenticated attackers run code on Adobe Commerce and Magento servers; no exploitation observed.
OpenBSD 7.9 Exploit Chains Shared-Memory Overflow to Gain Local Root
Researchers say a PoC chain using shared-memory overflow and use-after-free gives local root on OpenBSD 7.9, with fixes via syspatch.
Langflow Command Injection Draws Exploitation Attempts as Version 1.9.0 Fixes RCE
Authenticated Langflow flaw enables OS command execution via MCP Stdio config; Previdian reports exploitation attempts and urges upgrade to 1.9.0.
BeyondTrust Remote Support Zero-Day Exploited Against Hosted and Self-Hosted Appliances
BeyondTrust Remote Support zero-day exploited in hosted and self-hosted appliances, enabling file operations and root access, linked to Armory Castle.