CVE-2026-96652
Plex Media Server SSRF
CVSS score
4.3
EPSS probability
%0.2
Risk score
0.0
Published
26 d ago
Related Security News
Articles and analysis bulletins in which the press and security publications have covered this vulnerability:
Plex2Shell Exploit Chain Weaponized Against Plex Servers Hours After Disclosure
Threat actors have been observed delivering cryptocurrency miners and proxy software. The post Plex2Shell Exploit Chain Weaponized Against Plex Servers Hours After Disclosure appeared first on SecurityWeek.
Similar Vulnerabilities
8.6
CVE-2026-96656Plex Media Server arbitrary file write
Patch status unknownEPSS %0
6.5
CVE-2026-96651Plex Media Server path traversal
Patch status unknownEPSS %1
7.1
CVE-2025-69415Vulnerability in Plex Media Server
Patch status unknown Public Exploits:1EPSS %0
7.1
CVE-2025-69414Incorrect authorization in Plex Media Server
Patch status unknown Public Exploits:1EPSS %0
6.9
CVE-2026-96654Plex Media Server URL injection
Patch status unknownEPSS %0
4.3
CVE-2025-69417Incorrect authorization in Plex Media Server
Patch status unknown Public Exploits:1EPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-96652"