Securexion Daily Exploit Watch - 23 Oct 2026
Five actively exploited flaws demand immediate action: OS command injection in SiteGuard Server Edition, multiple critical vulnerabilities in Plex Media Server, uncontrolled DLL loading in Siemens Software Center, and authentication bypass in Oracle Access Manager.
Five actively exploited flaws demand immediate action: OS command injection in SiteGuard Server Edition, multiple critical vulnerabilities in Plex Media Server, uncontrolled DLL loading in Siemens Software Center, and authentication bypass in Oracle Access Manager.
SiteGuard Server Edition OS command injection allows root/SYSTEM privilege escalation
E-guardian SiteGuard Server Edition versions 2.20 through 8.00 contain an OS command injection vulnerability (CWE-78) exploitable by local users with low privileges. Attackers can execute arbitrary commands with root or SYSTEM level access, fully compromising the host system.
What to do: Immediately patch to version 8.00 or later; verify no unsupported versions (2.20–7.00) remain in production inventory.
Plex Media Server multiple critical flaws enable file write, SSRF, and cross-plugin attack
Plex Media Server before version 1.43.3.10861 contains four distinct actively exploited vulnerabilities including arbitrary file write (CWE-73), server-side request forgery via two endpoints (CWE-918), and URL-scheme mishandling (CWE-84). Together, these allow admin users to achieve code execution, authenticated users to perform SSRF attacks, and unauthenticated users to manipulate plugin behavior.
What to do: Immediately patch all Plex Media Server instances to version 1.43.3.10861 or later; verify no instances remain on pre-1.43.3.10861 versions.
Siemens Software Center uncontrolled DLL load enables local privilege escalation
Siemens Software Center before version 4.0.9.8 searches for dynamic-link libraries (DLLs) in uncontrolled paths, allowing an authenticated local attacker to plant a malicious DLL and achieve code execution with the application's privileges. This is actively exploited.
What to do: Patch Siemens Software Center to version 4.0.9.8 or later immediately; audit all versions prior to 4.0.9.8 in your environment.
Oracle Access Manager authentication bypass allows unauthenticated compromise
Oracle Access Manager versions 12.2.1.4.0 and 14.1.2.1.0 contain an easily exploitable vulnerability in the Authentication Engine component that allows unauthenticated network attackers to gain full control. This is a CVSS 10.0 flaw with scope change affecting the entire platform.
What to do: Immediately apply Oracle's security patch to Access Manager 12.2.1.4.0 or 14.1.2.1.0; upgrade to a patched version or discontinue use if patches are unavailable.
Securexion is the daily exploit watch by FutureOps InfoTech. Need help patching or checking for compromise? Talk to us.