21 October 2026 · 2 min read
File Name or Path Control Vulnerability in Plex Media Server
Summary: CISA has issued an alert regarding an actively exploited file name or path control vulnerability (CVE-2026-96656) in Plex Media Server. This flaw allows an admin user to write arbitrary files that can be …