CISA Adds Six Known Exploited Vulnerabilities to Catalog

What happened

CISA has added six new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-96652 Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability CVE-2026-96654 Plex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page Vulnerability CVE-2026-96655 Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability...

Why it matters

The incident may affect operational continuity, asset safety or trust around Security. Watch for verified scope and remediation.

Affected entities

View evidence

1 reports · 1 original report · 1 independent

1. CISA Cybersecurity AdvisoriesPrimary source · Supports · EN · 100%
   CISA Adds Six Known Exploited Vulnerabilities to Catalog ↗Oct 20, 2026, 8:00 AM

Claims

• CISA Adds Six Known Exploited Vulnerabilities to Catalog Observed

Conflicts

No material conflict detected in the available evidence.

Timeline

1. October 20, 2026 at 8:00 AMFirst reported

Market move following event

Market reaction is not yet available for this asset and time window.

Score explanation