CISA Adds Six Known Exploited Vulnerabilities to Catalog

CISA has added six new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-96652 Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability CVE-2026-96654 Plex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page Vulnerability CVE-2026-96655 Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability…

Summary from CISA Advisories.

Vulnerabilities in this story

Severity and exploitation facts from NVD, FIRST, and CISA.

• CVE-2026-96656High 8.6Known exploitedEPSS 0.4%
• CVE-2026-106931High 8.5Known exploitedEPSS 0.7%
• CVE-2026-110936High 8.4Known exploitedEPSS 0.1%
• CVE-2026-96654Medium 6.9Known exploitedEPSS 0.2%
• CVE-2026-96652Medium 5.3Known exploitedEPSS 0.2%
• CVE-2026-96655Medium 5.3Known exploitedEPSS 0.2%

Related coverage

Other sources covering the same vulnerabilities or event.

More in Vulnerabilities

PHP2Shell: Mass Exploitation Looms for Leaked Critical PHP Flaws

SecurityWeek1h agoVulnerabilitiesCVE-2026-109618CVE-2026-109619

PHP2Shell: Two Unpatched Critical PHP RCE Flaws (CVSS 9.2) Trigger Emergency Security Alert

The Hacker News3h agoAppSecVulnerabilities

Risky Business #856 -- 8-bit encryption, PHP megabugs and more

Podcast1 h 5 minRisky Business3h agoThreat IntelVulnerabilitiesAI

Urgent Livestream - PHP Vulnerabilities: What You Need to Know Today and Do Right Now

VideoSANS Institute6h agoVulnerabilities

SANS Stormcast Wednesday, October 21st, 2026: eMudhra Intermediate CA Certificates Revoked; Critical PHP Security Release; Oracle CPU E-Business Suite SQLi (CVE-2026-101767); FortiSIEM gRPC RCE PoC

Podcast6 minSANS Internet Storm Center StormCast6h agoAppSecEndpointVulnerabilitiesCVE-2026-101767