CISA added CVE-2026-106931 (EG Secure Solutions SiteGuard Server Edition) to its Known Exploited Vulnerabilities catalog on October 20, 2026, which means there is reliable evidence of exploitation in the wild. EG Secure Solutions SiteGuard Server Edition contains an OS command injection vulnerability which may allow an attacker to execute arbitrary OS commands with root or SYSTEM privileges on the system running the…
Why it matters
CISA lists this as exploited in the wild. Unpatched SiteGuard Server Edition systems are exposed to active attacks now.
Patch
Apply the vendor's security update for SiteGuard Server Edition.
CISA has added six new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation.
CVE-2026-96652 Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability
CVE-2026-96654 Plex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page Vulnerability
CVE-2026-96655 Plex Media Server Server-Side Request Forgery (SSRF)…
Why it matters
CISA lists this as exploited in the wild. Unpatched SiteGuard Server Edition and Media Server systems are exposed to active attacks now.
Patch
Apply the vendor's security update for SiteGuard Server Edition and Media Server.
CISA Cybersecurity AdvisoriesEnterpriseCritical infra
Recent intelligence
The latest developments from the last 30 days, newest first.
AdvisoryKEV
CISA Adds Six Known Exploited Vulnerabilities to Catalog