/
vendors:Plex × limpar

Resultados

3 casos · pág. 1/1

securityaffairs.com · · 3 fontes · 3 atualizações critical

Plex2Shell exploit chain used to turn vulnerable Plex Media Servers into crypto miners and proxy nodes

Attackers began exploiting Plex2Shell, a chain of four Plex Media Server vulnerabilities, within about a day of researcher Zach Main publishing technical details and PoC code on October 16, 2026. A researcher running an internet-facing honeypot observed the first in-the-wild exploitation on October 17. The attackers deployed an XMRig-base…

cisa.gov · critical

CISA adds six exploited flaws in Plex Media Server, SiteGuard Server Edition and Siemens Software Center to KEV

CISA added six vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog based on evidence of active exploitation. Four affect Plex Media Server: CVE-2026-96652 and CVE-2026-96655 (SSRF), CVE-2026-96654 (improper neutralization of encoded URI schemes) and CVE-2026-96656 (external control of file name or path). The other two are…