CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA reports multiple vulnerabilities with evidence of active exploitation and urges immediate remediation, especially for internet-facing systems. The alert set includes unauthenticated remote code execution in PHP (“php2shell”), BeyondTrust Remote Support authentication bypass enabling initial access and lateral movement, command injection, SQL injection, SSRF, path traversal, file/path manipulation, and other flaws across Collabora Online, Arista VeloCloud Orchestrator, Plex Media Server, Fortinet, EG Secure Solutions SiteGuard, and Siemens Software Center. Federal agencies should follow BΟ