CISA Adds Six Known Exploited Vulnerabilities to Catalog

CISA added six actively exploited vulnerabilities (six CVEs) to its Known Exploited Vulnerabilities Catalog affecting Plex Media Server (multiple SSRF and URI/file handling flaws), EG Secure Solutions SiteGuard (OS command injection), and Siemens Software Center (uncontrolled search path). The notice highlights that these are frequently exploited attack vectors, references Binding Operational Directive 26-04 for prioritizing rapid remediation on exposed assets, and encourages organizations to follow KEV guidance and submit evidence for other exploited vulnerabilities.