CISA Mandates Federal Agencies Patch Actively Exploited Vulnerabilities

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added four vulnerabilities, including Plex Media Server flaws (Plex2Shell) and issues in Siemens Software Center and EG Secure Solutions SiteGuard Server Edition, to its Known Exploited Vulnerabilities (KEV) catalog. Federal agencies are now required to patch these actively exploited vulnerabilities to mitigate risks of unauthenticated remote code execution and other attacks, emphasizing the immediate threat posed by these security gaps.