Plexcor: 4 Actively-Exploited Flaws Added to CISA KEV
Plexcor has seen four of its vulnerabilities added to CISA's Known Exploited Vulnerabilities catalog, confirming their active exploitation in the wild.
Key findings
- Four Plexcor vulnerabilities (CVE-2026-96652, CVE-2026-96654, CVE-2026-96655, CVE-2026-96656) are now in CISA's KEV catalog.
- These flaws are confirmed to be actively exploited in the wild, requiring immediate attention.
- Organizations must prioritize patching all affected Plexcor products without delay.
- No ransomware association has been reported for this batch of actively exploited vulnerabilities.
The Cybersecurity and Infrastructure Security Agency (CISA) has added four Plexcor vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, signaling that these flaws are under active attack by malicious actors. The inclusion of CVEs in the KEV catalog serves as a critical alert for federal agencies and private organizations alike, mandating urgent remediation to protect against ongoing threats.
The KEV catalog is a definitive list of security vulnerabilities that have been confirmed to be exploited in real-world attacks. For any vulnerability to be added, CISA must have credible evidence of active exploitation. This designation elevates the urgency for organizations using Plexcor products to immediately assess their exposure and apply available patches or mitigations.
The newly added Plexcor vulnerabilities are:
- **CVE-2026-96652**: An actively exploited flaw in Plexcor systems.
- **CVE-2026-96654**: Another vulnerability confirmed to be under active attack.
- **CVE-2026-96655**: A security defect that attackers are currently leveraging.
- **CVE-2026-96656**: The fourth Plexcor vulnerability identified as actively exploited.
There is no indication that any of these specific vulnerabilities are currently associated with ransomware campaigns, though their active exploitation status still poses significant risk.
Organizations utilizing Plexcor products are strongly advised to review their environments for the presence of these vulnerabilities. CISA's directive for federal civilian executive branch agencies typically requires remediation within a short timeframe, often two weeks or less, from the date of KEV listing. All organizations should prioritize patching these flaws immediately to prevent potential compromise, data breaches, or further exploitation by threat actors. Regular patching and vulnerability management remain essential practices to maintain a strong security posture against evolving threats.