Patch Sonar: Other business software https://patchsonar.com/tech/apps Exploited vulnerabilities in other business software, in plain English. en-us Plex Media Server: Plex Media Server External Control of File Name or Path Vulnerability https://patchsonar.com/cve/CVE-2026-96656 https://patchsonar.com/cve/CVE-2026-96656 Tue, 20 Oct 2026 12:00:00 GMT Other business software Yes. CISA added this to its catalog of actively exploited vulnerabilities on Oct 20, 2026. What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent. Plex Media Server: Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability https://patchsonar.com/cve/CVE-2026-96655 https://patchsonar.com/cve/CVE-2026-96655 Tue, 20 Oct 2026 12:00:00 GMT Other business software Yes. CISA added this to its catalog of actively exploited vulnerabilities on Oct 20, 2026. What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent. Plex Media Server: Plex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page Vulnerability https://patchsonar.com/cve/CVE-2026-96654 https://patchsonar.com/cve/CVE-2026-96654 Tue, 20 Oct 2026 12:00:00 GMT Other business software Yes. CISA added this to its catalog of actively exploited vulnerabilities on Oct 20, 2026. What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent. Plex Media Server: Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability https://patchsonar.com/cve/CVE-2026-96652 https://patchsonar.com/cve/CVE-2026-96652 Tue, 20 Oct 2026 12:00:00 GMT Other business software Yes. CISA added this to its catalog of actively exploited vulnerabilities on Oct 20, 2026. What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent. Siemens Software Center: Siemens Software Center Uncontrolled Search Path Element Vulnerability https://patchsonar.com/cve/CVE-2026-110936 https://patchsonar.com/cve/CVE-2026-110936 Tue, 20 Oct 2026 12:00:00 GMT Other business software Yes. CISA added this to its catalog of actively exploited vulnerabilities on Oct 20, 2026. What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent. EG Secure Solutions SiteGuard Server Edition: EG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerability https://patchsonar.com/cve/CVE-2026-106931 https://patchsonar.com/cve/CVE-2026-106931 Tue, 20 Oct 2026 12:00:00 GMT Other business software Yes. CISA added this to its catalog of actively exploited vulnerabilities on Oct 20, 2026. What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent. Zammad GmbH Zammad: Zammad GmbH Zammad Improper Privilege Management Vulnerability https://patchsonar.com/cve/CVE-2026-102490 https://patchsonar.com/cve/CVE-2026-102490 Fri, 02 Oct 2026 12:00:00 GMT Other business software Yes. CISA added this to its catalog of actively exploited vulnerabilities on Oct 2, 2026. What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent. Zammad GmbH Zammad: Zammad GmbH Zammad Session Fixation Vulnerability https://patchsonar.com/cve/CVE-2026-102489 https://patchsonar.com/cve/CVE-2026-102489 Fri, 02 Oct 2026 12:00:00 GMT Other business software Yes. CISA added this to its catalog of actively exploited vulnerabilities on Oct 2, 2026. What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent. Sangoma Switchvox: Sangoma Switchvox SQL Injection Vulnerability https://patchsonar.com/cve/CVE-2026-9586 https://patchsonar.com/cve/CVE-2026-9586 Wed, 02 Sep 2026 12:00:00 GMT Other business software Yes. CISA added this to its catalog of actively exploited vulnerabilities on Sep 2, 2026. What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent. PaperCut NG/MF: PaperCut NG/MF Unsafe Reflection Vulnerability https://patchsonar.com/cve/CVE-2026-82078 https://patchsonar.com/cve/CVE-2026-82078 Mon, 31 Aug 2026 12:00:00 GMT Other business software Yes. CISA added this to its catalog of actively exploited vulnerabilities on Aug 31, 2026. What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent. PaperCut NG/MF: PaperCut NG/MF Missing Authentication for Critical Function Vulnerability https://patchsonar.com/cve/CVE-2026-81578 https://patchsonar.com/cve/CVE-2026-81578 Mon, 31 Aug 2026 12:00:00 GMT Other business software Yes. CISA added this to its catalog of actively exploited vulnerabilities on Aug 31, 2026. What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.