netVigilance Vulnerability intelligence since 2004

Plex

5 Plex vulnerabilities with confirmed exploitation in the wild, as published by CISA; 3 past the federal remediation deadline. This is a static slice of the catalog — open the full catalog for search and filters.

Known exploited vulnerabilities for Plex
Vulnerability Status
overdue 4d2026-10-23 CVE-2026-96656 Plex / Media Server Plex Media Server External Control of File Name or Path Vulnerability 2026-10-20 8.6 past due
in 7d2026-11-03 CVE-2026-96655 Plex / Media Server Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability 2026-10-20 5.3 active
overdue 4d2026-10-23 CVE-2026-96654 Plex / Media Server Plex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page Vulnerability 2026-10-20 6.9 past due
in 7d2026-11-03 CVE-2026-96652 Plex / Media Server Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability 2026-10-20 5.3 active
overdue 1306d2023-03-31 CVE-2020-5741 Plex / Media Server Plex Media Server Remote Code Execution Vulnerability 2023-03-10 7.2 past due