Our weekly CVE report for Oct 19-25, 2026 tracks 4,222 new CVEs and 12 exploited vulnerabilities, including PHP2Shell flaws not yet in CISA KEV. Related Posts: This Weekly CVE Report Finds CISA KEV Trailing Daily Cybersecurity by Up to 8 Days Six Exploited Flaws Missing From CISA KEV Lead This Weekly CVE Report Weekly CVE Report Tracks 2,652 New Flaws and Seven Exploited Vulnerabilities (Sept. 28 - Oct. 4, 2026) The post Weekly CVE Report Flags PHP2Shell and FortiSIEM Attacks Still Missing Fr

Plex Media Server vulnerabilities are exploited in the wild after the Plex2Shell PoC went public. Attackers drop miners. Update to 1.43.3.10861. Related Posts: Roundcube 1.6.20 and 1.7.5 Fix 20 Security Flaws, Including IMAP Command Injection PwnEscape Linux Kernel Flaw CVE-2026-99999 Lets VM Guests Escape to the Host CISA Warns of Critical Flaws in dcm4chee Medical Archive and Unpatched EseeCloud IP Cameras The post Plex2Shell Exploited in the Wild: PoC Released for Unauthenticated Plex Medi