Vendors and CVEs › CVEs › CVE-2026-96652
CVE-2026-96652: what it is, who is affected and what to do
CISA added vulnerabilities to its Known Exploited Vulnerabilities catalogue, including Plex Media Server flaws called Plex2Shell. One is a server-side request forgery (CVE-2026-96652, CVSS 5.3). The title says Siemens and SiteGuard flaws were also added.
- Known exploited. Yes, on CISA’s list of exploited flaws.
- CVSS. 5.3, as the source states.
- Records. CVE-2026-96652 on the National Vulnerability Database · CISA’s known exploited catalog
The stories
Critical Known exploited
CISA says Plex, Siemens and SiteGuard flaws are being exploited
CISA added vulnerabilities to its Known Exploited Vulnerabilities catalogue, including Plex Media Server flaws called Plex2Shell. One is a server-side request forgery (CVE-2026-96652, CVSS 5.3).
Critical Known exploited
CISA adds six actively exploited flaws, including Siemens Software Center
CISA added six vulnerabilities to its Known Exploited Vulnerabilities Catalog based on evidence of active exploitation.