CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA reports active exploitation of multiple vulnerabilities added to its Known Exploited Vulnerabilities catalog, including unauthenticated remote code execution in PHP (“php2shell”), BeyondTrust Remote Support authentication bypass, Collabora Online OS command injection, Arista VeloCloud Orchestrator SQL injection, Fortinet path traversal, Plex Media Server SSRF and file/path flaws, SiteGuard OS command injection, and Siemens Software Center uncontrolled search path vulnerabilities. Organizations should inventory affected products, immediately patch internet-facing systems, restrict exposed.