The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added four vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog. These vulnerabilities impact Plex Media Server and are collectively referred to as Plex2Shell.
One of the listed vulnerabilities is CVE-2026-96652, a Plex Media Server Server-Side Request Forgery (SSRF) vulnerability with a CVSS score of 5.3.
By the numbers
- CVSS score for CVE-2026-96652
- 5.3
Sources and references
Original report
CISA Orders Federal Agencies to Patch Exploited Plex2Shell, Siemens, and SiteGuard Flaws
The Hacker News
Read on The Hacker News (opens in a new tab)Ref 00LPN4OC
Cite this
APA
Interestana AI Editorial. (2026, October 21). CISA Mandates Patching of Exploited Plex2Shell Vulnerabilities. Interestana. https://interestana.com/articles/cisa-orders-federal-agencies-to-patch-exploited-plex2shell-siemens-and-siteguard-flaws-00lpn4oc
MLA
“CISA Mandates Patching of Exploited Plex2Shell Vulnerabilities.” Interestana, 21 Oct. 2026, interestana.com/articles/cisa-orders-federal-agencies-to-patch-exploited-plex2shell-siemens-and-siteguard-flaws-00lpn4oc.
Chicago
Interestana AI Editorial. “CISA Mandates Patching of Exploited Plex2Shell Vulnerabilities.” Interestana, October 21, 2026. https://interestana.com/articles/cisa-orders-federal-agencies-to-patch-exploited-plex2shell-siemens-and-siteguard-flaws-00lpn4oc.
BibTeX
@misc{interestana_00lpn4oc,
author = {{Interestana AI Editorial}},
title = {{CISA Mandates Patching of Exploited Plex2Shell Vulnerabilities}},
howpublished = {Interestana},
year = {2026},
month = oct,
url = {https://interestana.com/articles/cisa-orders-federal-agencies-to-patch-exploited-plex2shell-siemens-and-siteguard-flaws-00lpn4oc},
note = {Summary of reporting by The Hacker News, https://thehackernews.com/2026/10/cisa-orders-federal-agencies-to-patch.html}
}Credit the source
Original reporting: The Hacker News, “CISA Orders Federal Agencies to Patch Exploited Plex2Shell, Siemens, and SiteGuard Flaws”, https://thehackernews.com/2026/10/cisa-orders-federal-agencies-to-patch.html(opens in a new tab)
Follow this story
Get Cybersecurity in your inbox — new stories in 40 words or fewer, once a week.
Subscribe