CISA Orders Federal Agencies to Patch Exploited Plex2Shell, Siemens, and SiteGuard Flaws

CISA added four Plex Media Server vulnerabilities, collectively called Plex2Shell, and two additional vulnerabilities in Siemens Software Center and EG Secure Solutions SiteGuard Server Edition to its Known Exploited Vulnerabilities (KEV) catalog. According to the source, the Plex flaws are being weaponized to deploy cryptocurrency miners and proxy malware; the Siemens Software Center flaw has been used in ClickFix attacks, and the SiteGuard flaw has been confirmed as exploited.