https://onurbaydas.com/en/tags/kev/Recent content in Kev on Onur BaydaşHugoen-usWed, 21 Oct 2026 10:35:55 +0300https://onurbaydas.com/en/news/2026-10-21-plex-media-server-file-path/Wed, 21 Oct 2026 10:35:55 +0300https://onurbaydas.com/en/news/2026-10-21-plex-media-server-file-path/CISA has issued an alert regarding an actively exploited file name or path control vulnerability (CVE-2026-96656) in Plex Media Server. This flaw allows an admin user to write arbitrary files that can be executed upon loading.https://onurbaydas.com/en/news/2026-10-21-plex-media-server-uri-scheme/Wed, 21 Oct 2026 10:35:55 +0300https://onurbaydas.com/en/news/2026-10-21-plex-media-server-uri-scheme/CISA has issued an alert regarding an actively exploited improper neutralization of encoded URI schemes vulnerability (CVE-2026-96654) in Plex Media Server. This flaw allows an attacker to call functions of other plugins and supply their own parameters.https://onurbaydas.com/en/news/2026-10-21-eg-siteguard-command-injection/Wed, 21 Oct 2026 10:35:55 +0300https://onurbaydas.com/en/news/2026-10-21-eg-siteguard-command-injection/CISA has identified an actively exploited OS command injection vulnerability in EG Secure Solutions SiteGuard Server Edition. This flaw allows attackers to execute arbitrary commands with root or SYSTEM privileges.https://onurbaydas.com/en/news/2026-10-21-plex-media-server-ssrf/Wed, 21 Oct 2026 10:35:55 +0300https://onurbaydas.com/en/news/2026-10-21-plex-media-server-ssrf/CISA has warned about an actively exploited SSRF vulnerability (CVE-2026-96655) in Plex Media Server. This flaw allows an authenticated user to send requests to arbitrary internal or external addresses via the '/video/:/transcode/universal' path.