On 20 October 2026, CISA added four Plex Media Server vulnerabilities to its Known Exploited Vulnerabilities catalogue, confirming active exploitation in the wild. The vulnerabilities can be chained together to achieve remote code execution on unpatched systems. This episode walks through the technical detail of each CVE (CVE-2026-96652, CVE-2026-96654, CVE-2026-96655, and CVE-2026-96656), explains how attackers exploit server-side request forgery and file write flaws to gain administrative access, and provides actionable steps for UK small businesses. Also covered: a DLL sideloading vulnerability in Siemens Software Center exploited via ClickFix social engineering attacks, and the operational implications of autonomous AI-driven scanning at scale. Patches for all discussed vulnerabilities are available. This episode emphasises the importance of treating personal software that sits on business networks with the same urgency as enterprise systems, and provides clear remediation steps for organisations holding Cyber Essentials certification.
