---
title: "Plex: known exploited vulnerabilities"
url: https://erroneo.us/security/vendor/plex/
description: "Every Plex vulnerability in CISA's Known Exploited Vulnerabilities catalog since October 2023 (4), newest first, with due dates and fixes."
type: vendor
section: "Security Digest"
date_modified: 2026-10-20
publisher: erroneo.us
author: erroneo.us Security Desk
license: All rights reserved. Quote with attribution and a link.
---

# Plex: known exploited vulnerabilities

- 2026-10-20 [CVE-2026-96656](https://erroneo.us/security/cve/CVE-2026-96656/index.md) Plex Media Server: Plex Media Server External Control of File Name or Path Vulnerability (due 2026-10-23; ransomware: Unknown)
- 2026-10-20 [CVE-2026-96655](https://erroneo.us/security/cve/CVE-2026-96655/index.md) Plex Media Server: Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability (due 2026-11-03; ransomware: Unknown)
- 2026-10-20 [CVE-2026-96654](https://erroneo.us/security/cve/CVE-2026-96654/index.md) Plex Media Server: Plex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page Vulnerability (due 2026-10-23; ransomware: Unknown)
- 2026-10-20 [CVE-2026-96652](https://erroneo.us/security/cve/CVE-2026-96652/index.md) Plex Media Server: Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability (due 2026-11-03; ransomware: Unknown)

---
Source page: https://erroneo.us/security/vendor/plex/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt