CISA added four Plex Media Server vulnerabilities known as Plex2Shell to its Known Exploited Vulnerabilities catalog.
Researchers demonstrated they can be chained for unauthenticated remote code execution, while active exploitation has been linked to cryptomining and proxy malware deployment.
Version 1.43.3.10861 addresses the issues.
The security holes in Plex Media Server
The focus is on four issues in the popular Plex Media Server, collectively known as Plex2Shell. According to security researchers, if someone exploits these vulnerabilities in combination, they could gain complete control of the system remotely without even needing a password.
As found by relevant research, these gaps are already being exploited in practice by attackers to install programs that mine cryptocurrency or operate as hidden proxy networks. The company behind the service had released an update that fixes the problems as of August 3, 2026.
Other problems in company programs
In addition to the above service, CISA added two other serious software issues to the list of active threats. The first concerns Siemens Software Center and has been used in user deception attacks through a platform known as Romulus. The second concerns the SiteGuard Server Edition server from EG Secure Solutions, with the Japanese company confirming that the issue is being exploited in attacks.
Deadlines for corrections
United States government agencies have been given strict deadlines to apply the necessary updates to affected systems. Specifically, fixes for some of the issues must be completed by October 23, 2026, while the deadline for the rest is November 3, 2026.
READ ALSO
Serious security issues in PHP bring warnings for immediate updates or website shutdown
G
Hacks.gr on Google
Set it as a preferred source for cybersecurity updates.
Preferred source
Top comments (0)