Other business software

11 flaws exploited in the last 90 days, 6 of them new or urgent. Each links to a plain-English page: who's affected and exactly what to update.

See it on the live board RSS feed Deadline calendar

• Plex Media ServerPlex Media Server External Control of File Name or Path VulnerabilityNewly listed by CISA · Oct 20, 2026
• Plex Media ServerPlex Media Server Server-Side Request Forgery (SSRF) VulnerabilityNewly listed by CISA · Oct 20, 2026
• Plex Media ServerPlex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page VulnerabilityNewly listed by CISA · Oct 20, 2026
• Plex Media ServerPlex Media Server Server-Side Request Forgery (SSRF) VulnerabilityNewly listed by CISA · Oct 20, 2026
• Siemens Software CenterSiemens Software Center Uncontrolled Search Path Element VulnerabilityNewly listed by CISA · Oct 20, 2026
• EG Secure Solutions SiteGuard Server EditionEG Secure Solutions SiteGuard Server Edition OS Command Injection VulnerabilityNewly listed by CISA · Oct 20, 2026
• Zammad GmbH ZammadZammad GmbH Zammad Improper Privilege Management VulnerabilityOn CISA’s exploited list · Oct 2, 2026
• Zammad GmbH ZammadZammad GmbH Zammad Session Fixation VulnerabilityOn CISA’s exploited list · Oct 2, 2026
• Sangoma SwitchvoxSangoma Switchvox SQL Injection VulnerabilityOn CISA’s exploited list · Sep 2, 2026
• PaperCut NG/MFPaperCut NG/MF Unsafe Reflection VulnerabilityOn CISA’s exploited list · Aug 31, 2026
• PaperCut NG/MFPaperCut NG/MF Missing Authentication for Critical Function VulnerabilityOn CISA’s exploited list · Aug 31, 2026