Vulnerability Overview
Exploitation Activity
Exploitation Intelligence
A chain of vulnerabilities in Plex Media Server, termed Plex2Shell, is being by attackers to gain unauthorized access and deploy cryptocurrency miners and proxy software. The vulnerabilities, tracked as CVE-2026-96652, CVE-2026-96654, CVE-2026-96655, and CVE-2026-96656, allow unauthenticated remote...
On October 19, 2026, threat actors exploited an unpatched OS command injection vulnerability in SiteGuard Server Edition WAF, allowing them to gain root or SYSTEM privileges. Concurrently, seven ConnectWise application identities were compromised, leading to unauthorized access to customer Microsoft...
QNAP has issued an urgent advisory regarding ongoing attacks exploiting the Plex2Shell vulnerability chain, affecting its NAS devices. Users are urged to update Plex Media Server to version 1.43.3.10861 or later to mitigate risks. The vulnerabilities, tracked as CVE-2026-96652, CVE-2026-96654, CVE-2...
