Summary: CISA has issued an alert regarding an actively exploited Server-Side Request Forgery (SSRF) vulnerability (CVE-2026-96652) in Plex Media Server. This flaw allows attackers to force the Plex server to send a …
Summary: The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has reported that four vulnerabilities in Plex Media Server are actively being exploited. Attackers are using these flaws in Plex2Shell attacks …
Summary: CISA has issued an alert regarding an actively exploited file name or path control vulnerability (CVE-2026-96656) in Plex Media Server. This flaw allows an admin user to write arbitrary files that can be …
Summary: CISA has issued an alert regarding an actively exploited improper neutralization of encoded URI schemes vulnerability (CVE-2026-96654) in Plex Media Server. This flaw allows an attacker to call functions of …
Summary: CISA has warned about an actively exploited SSRF vulnerability (CVE-2026-96655) in Plex Media Server. This flaw allows an authenticated user to send requests to arbitrary internal or external addresses via the …
Summary: Threat actors have started exploiting a chain of vulnerabilities in Plex Media Server to deploy cryptocurrency miners and reverse proxy software. This exploitation began just one day after a proof-of-concept …