CVE-2026-96655
Plex Media Server arbitrary-host SSRF
CVSS score
4.3
EPSS probability
%0.2
Risk score
0.0
Published
23 d ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
8.6
CVE-2026-96656Plex Media Server arbitrary file write
Patch status unknownEPSS %0
6.5
CVE-2026-96651Plex Media Server path traversal
Patch status unknownEPSS %1
7.1
CVE-2025-69415Vulnerability in Plex Media Server
Patch status unknown Public Exploits:1EPSS %0
7.1
CVE-2025-69414Incorrect authorization in Plex Media Server
Patch status unknown Public Exploits:1EPSS %0
6.9
CVE-2026-96654Plex Media Server URL injection
Patch status unknownEPSS %0
4.3
CVE-2025-69417Incorrect authorization in Plex Media Server
Patch status unknown Public Exploits:1EPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-96655"