https://onurbaydas.com/en/tags/plex/Recent content in Plex on Onur BaydaşHugoen-usThu, 22 Oct 2026 10:32:06 +0300https://onurbaydas.com/en/news/2026-10-22-cisa-plex-media-server-ssrf/Thu, 22 Oct 2026 10:32:06 +0300https://onurbaydas.com/en/news/2026-10-22-cisa-plex-media-server-ssrf/CISA has issued an alert regarding an actively exploited Server-Side Request Forgery (SSRF) vulnerability (CVE-2026-96652) in Plex Media Server. This flaw allows attackers to force the Plex server to send a POST request to a chosen destination and can be chained with other vulnerabilities.https://onurbaydas.com/en/news/2026-10-22-cisa-plex-vulnerabilities-attacks/Thu, 22 Oct 2026 10:32:06 +0300https://onurbaydas.com/en/news/2026-10-22-cisa-plex-vulnerabilities-attacks/The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has reported that four vulnerabilities in Plex Media Server are actively being exploited. Attackers are using these flaws in Plex2Shell attacks to breach servers.https://onurbaydas.com/en/news/2026-10-21-plex-media-server-file-path/Wed, 21 Oct 2026 10:35:55 +0300https://onurbaydas.com/en/news/2026-10-21-plex-media-server-file-path/CISA has issued an alert regarding an actively exploited file name or path control vulnerability (CVE-2026-96656) in Plex Media Server. This flaw allows an admin user to write arbitrary files that can be executed upon loading.https://onurbaydas.com/en/news/2026-10-21-plex-media-server-uri-scheme/Wed, 21 Oct 2026 10:35:55 +0300https://onurbaydas.com/en/news/2026-10-21-plex-media-server-uri-scheme/CISA has issued an alert regarding an actively exploited improper neutralization of encoded URI schemes vulnerability (CVE-2026-96654) in Plex Media Server. This flaw allows an attacker to call functions of other plugins and supply their own parameters.https://onurbaydas.com/en/news/2026-10-21-plex-media-server-ssrf/Wed, 21 Oct 2026 10:35:55 +0300https://onurbaydas.com/en/news/2026-10-21-plex-media-server-ssrf/CISA has warned about an actively exploited SSRF vulnerability (CVE-2026-96655) in Plex Media Server. This flaw allows an authenticated user to send requests to arbitrary internal or external addresses via the '/video/:/transcode/universal' path.https://onurbaydas.com/en/news/2026-10-20-plex-vulnerabilities-crypto-miners/Tue, 20 Oct 2026 09:55:43 +0300https://onurbaydas.com/en/news/2026-10-20-plex-vulnerabilities-crypto-miners/Threat actors have started exploiting a chain of vulnerabilities in Plex Media Server to deploy cryptocurrency miners and reverse proxy software. This exploitation began just one day after a proof-of-concept (PoC) was made public.