CISA KEV · Refreshed daily
CVE Intelligence
Actively exploited vulnerabilities from CISA's Known Exploited Vulnerabilities catalog — with IT Intelligence's analysis of real-world impact and specific remediation steps.
Actively exploited vulnerabilities from CISA's Known Exploited Vulnerabilities catalog — with IT Intelligence's analysis of real-world impact and specific remediation steps.
Updated October 22, 2026
Patch SiteGuard Server Edition to stop root command injection
SiteGuard Server Edition contains an OS command injection flaw that lets an attacker run arbitrary commands with root or SYSTEM privileges. The vulnerability is weaponized in the wild, giving threat actors full control of the host.
Mitigate Plex SSRF to prevent unauthorized internal requests
An SSRF bug allows any user with an X‑Plex‑Token to force the server to POST arbitrary URLs via the ‘protocol’ parameter. Attackers can combine this with other Plex flaws to achieve code execution.
Address Plex URI scheme handling to stop plugin abuse
Improper neutralization of encoded URI schemes lets attackers invoke functions in other plugins with crafted parameters. When chained with related Plex bugs, it can lead to arbitrary code execution.
Patch Plex SSRF on transcode endpoint to block internal abuse
A second SSRF issue in the ‘/video/:/transcode/universal’ path allows authenticated users to request arbitrary internal or external addresses. Combined with other Plex flaws, it enables full server takeover.
Fix Plex file‑path control to stop arbitrary file writes
An external control of file name/path bug lets admin users write arbitrary files that may be executed on load. When chained with other Plex vulnerabilities, it provides a path to remote code execution.
Update Siemens Software Center to close DLL search‑path hijack
An uncontrolled search path element allows an authenticated local attacker to place a malicious DLL in a directory that the application loads, resulting in code execution with application privileges.
Apply BeyondTrust patch to stop authentication spoofing
A spoofing flaw permits remote attackers to bypass authentication and perform file operations on the support appliance. While not yet linked to ransomware, it provides a foothold for further attacks.
Patch Fortinet products to block path‑traversal file writes
A path traversal issue lets an authenticated admin with read‑write rights write or delete arbitrary files via specific CLI commands. This can be leveraged to replace binaries or inject malicious code.