Plex vulnerabilities
10 published CVEs name Plex among the affected products; CISA lists 4 of them as exploited in the wild.
- 10Published CVEs10 of them scored
- 9Last 12 monthspublished in the last year
- 0Critical5 more rated high
- 4Known exploitedin CISA's KEV catalog
Known exploited
Newest addition to KEV first.
- CVE-2026-96656
Plex Media Server arbitrary file write
Plex · Media Server
ExploitedHigh8.6 - CVE-2026-96655
Plex Media Server arbitrary-host SSRF
Plex · Media Server
ExploitedMedium5.3 - CVE-2026-96654
Plex Media Server URL injection
Plex · Media Server
ExploitedMedium6.9 - CVE-2026-96652
Plex Media Server SSRF
Plex · Media Server
ExploitedMedium5.3