Skip to content

cveboard RSS feed

Plex

Plex has 5 entries in CISA's Known Exploited Vulnerabilities catalog; the latest was added on Oct 20, 2026.

Tuesday, October 20
- CISA KEV CVE-2026-96656
  Plex Media Server External Control of File Name or Path Vulnerability
  - Plex Media Server
  - High
  - CVSS 8.6
  - EPSS 0.82%
  - Fixed version listed
  CISA due Oct 23, 2026
- CISA KEV CVE-2026-96654
  Plex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page Vulnerability
  - Plex Media Server
  - Moderate
  - CVSS 6.9
  - EPSS 0.47%
  - Fixed version listed
  CISA due Oct 23, 2026
- CISA KEV CVE-2026-96655
  Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability
  - Plex Media Server
  - Moderate
  - CVSS 5.3
  - EPSS 0.46%
  - Fixed version listed
  CISA due Nov 3, 2026
- CISA KEV CVE-2026-96652
  Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability
  - Plex Media Server
  - Moderate
  - CVSS 5.3
  - EPSS 0.46%
  - Fixed version listed
  CISA due Nov 3, 2026