Vendors and CVEs › Vendors › Plex
Plex: industrial cyber security news and vulnerabilities
2 stories in Industrial Cyber Brief name Plex, 2 on CISA’s list of known exploited flaws, from Wednesday 21 October 2026 to Thursday 22 October 2026. Newest first; each links the full story with who is affected and what to do.
The stories
Critical Known exploited
CISA says Plex, Siemens and SiteGuard flaws are being exploited
CISA added vulnerabilities to its Known Exploited Vulnerabilities catalogue, including Plex Media Server flaws called Plex2Shell. One is a server-side request forgery (CVE-2026-96652, CVSS 5.3).
Critical Known exploited
CISA adds six actively exploited flaws, including Siemens Software Center
CISA added six vulnerabilities to its Known Exploited Vulnerabilities Catalog based on evidence of active exploitation.