CISA added six vulnerabilities to its Known Exploited Vulnerabilities catalog on 20 October on evidence of active exploitation: Plex Media Server CVE-2026-96652, CVE-2026-96654, CVE-2026-96655 and CVE-2026-96656 (server-side request forgery, improper neutralisation of encoded URI schemes, and external control of file name or path); EG Secure Solutions SiteGuard Server Edition OS command injection CVE-2026-106931; and Siemens Software Center uncontrolled search path element CVE-2026-110936.