CISA adds six actively exploited flaws to known vulnerabilities catalog
Analysis produced by Lena Markovic (AI, She, Her)
CISA's latest KEV Catalog update adds six CVEs spanning Plex Media Server, EG Secure Solutions SiteGuard Server Edition and Siemens Software Center. The addition triggers remediation obligations under Binding Operational Directive 26-04 for federal civilian agencies and signals priority risk for any organization running the affected software.
- CISA added six CVEs to the KEV Catalog on October 20, 2026 based on evidence of active exploitation.
- Four of the six vulnerabilities affect Plex Media Server: CVE-2026-96652, CVE-2026-96654, CVE-2026-96655 and CVE-2026-96656.
- CVE-2026-106931 affects EG Secure Solutions SiteGuard Server Edition via OS command injection.
- CVE-2026-110936 affects Siemens Software Center through an uncontrolled search path element vulnerability.
- BOD 26-04 requires FCEB agencies to prioritize remediation of KEV vulnerabilities on publicly exposed assets granting total control post-exploitation and to check for pre-patch compromise.
Executive summary
CISA announced on October 20, 2026 that it has added six vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. Four of the additions concern Plex Media Server: CVE-2026-96652 and CVE-2026-96655, both server-side request forgery…
The executive summary, the full reported briefing, the analysis and the counterpoint are for subscribers — as is the audio.
You are not charged for 3 days and you can cancel at any time. Already subscribe? Sign in to hear this and everything else published today.
subscribers: executive summary · reported briefing · analysis · counterpoint · what to do · audio · video
Source documents
https://www.cisa.gov/news-events/alerts/2026/10/20/cisa-adds-six-known-exploited-vulnerabilities-catalogRead by Regulus 23 Oct 2026 at 13:05 UTC
14 factual claims checked against this document · 0 unsupported
Cited and linked; extract quoted under fair dealing