Exploited vulnerabilities
Plex
5 Plex vulnerabilities in the CISA KEV catalogue: those for which the US cybersecurity agency has evidence of exploitation in real attacks.
In the catalogue5
Last 12 months4
In ransomware campaigns0
Last addition20 October 2026
The vulnerabilities5
- 20 October 2026CVE-2026-96656Media ServerPlex Media Server External Control of File Name or Path Vulnerability
- 20 October 2026CVE-2026-96655Media ServerPlex Media Server Server-Side Request Forgery (SSRF) Vulnerability
- 20 October 2026CVE-2026-96654Media ServerPlex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page Vulnerability
- 20 October 2026CVE-2026-96652Media ServerPlex Media Server Server-Side Request Forgery (SSRF) Vulnerability
- 10 March 2023CVE-2020-5741Media ServerPlex Media Server Remote Code Execution Vulnerability
Data: CISA Known Exploited Vulnerabilities (KEV) catalogue, last addition on 4 November 2026.
The catalogue lists only vulnerabilities with evidence of exploitation, not all of the vendor's vulnerabilities.
Alerts only on the products you use
With My Defence you receive alerts and briefings only on the products you use, Plex included.