Plex CVEs
Every Plex vulnerability SECBORN has reported on, with live CVSS severity, CISA known-exploited status and EPSS exploit odds.
4 CVEs
EPSSCoverage
7.2CVSS 3.1
CVE-2026-96656
Exploited
Plex Media Server arbitrary file write
Plex · Media Server
EPSS
1.8%
2 stories
5 days ago
6.5CVSS 3.1
CVE-2026-96654
Exploited
Plex Media Server URL injection
Plex · Media Server
EPSS
1.9%
2 stories
5 days ago
4.3CVSS 3.1
CVE-2026-96652
Exploited
Plex Media Server SSRF
Plex · Media Server
EPSS
12%
2 stories
5 days ago
4.3CVSS 3.1
CVE-2026-96655
Exploited
Plex Media Server arbitrary-host SSRF
Plex · Media Server
EPSS
11%
2 stories
5 days ago
Scores and exploit data come from the CVE Program, NVD, CISA and FIRST.org. Each CVE links to SECBORN's reporting on it.