Critical Known exploited Patch available CVSS 5.3
CISA says Plex, Siemens and SiteGuard flaws are being exploited
The Hacker NewsPlex, Siemens, SiteGuardCVE-2026-96652
What happened. CISA added vulnerabilities to its Known Exploited Vulnerabilities catalogue, including Plex Media Server flaws called Plex2Shell. One is a server-side request forgery (CVE-2026-96652, CVSS 5.3). The title says Siemens and SiteGuard flaws were also added.
Who is affected. Plex Media Server users; the headline also names Siemens and SiteGuard products. The report gives no versions or sectors.
What to do. Check whether you run Plex Media Server, Siemens or SiteGuard products, and apply the vendor patches for the flaws listed in CISA's catalogue.
Editor's reading
Forasset ownerIT security
- Are you exposed?
Search your asset inventory for Plex Media Server, Siemens and SiteGuard products and compare them with the entries in CISA's Known Exploited Vulnerabilities catalogue.
Inferred from the facts above, not stated by the source. Check it against your own site before acting.
Source: The Hacker News (opens thehackernews.com)
More on Plex Siemens CVE-2026-96652