Security Digest
Plex: known exploited vulnerabilities
4 Plex CVEs CISA has confirmed as exploited in the wild since October 2023. If you run these products, check each one.
| Added | CVE | Product and flaw | CISA due |
|---|---|---|---|
| 2026-10-20 | CVE-2026-96656 | Plex Media Server Plex Media Server External Control of File Name or Path Vulnerability | 2026-10-23 |
| 2026-10-20 | CVE-2026-96655 | Plex Media Server Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability | 2026-11-03 |
| 2026-10-20 | CVE-2026-96654 | Plex Media Server Plex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page Vulnerability | 2026-10-23 |
| 2026-10-20 | CVE-2026-96652 | Plex Media Server Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability | 2026-11-03 |