CISA Orders Federal Agencies to Patch Exploited Plex2Shell, Siemens, and SiteGuard Flaws

The US Cybersecurity and Infrastructure Security Agency has added four vulnerabilities to its list of known exploited vulnerabilities. These include a set of flaws known as Plex2Shell, which affect Plex Media Server. One of the vulnerabilities, identified as CVE-2026-96652, is a Server-Side Request Forgery issue in Plex Media Server with a CVSS score of 5.3. The agency's action also covers vulnerabilities in Siemens and SiteGuard products. Federal agencies are being ordered to patch these exploited flaws. The move is intended to address vulnerabilities that are being actively exploited.