Plex Media Server < 1.43.3.10861 - Server Side Request Forgery CVE-2026-96654
- Severity
- EPSS Score
- EPSS Percentile
- Vulnerability description
- Not available
- Risk description
- Not available
- Recommendation
- Not available
- References
- https://nvd.nist.gov/vuln/detail/CVE-2026-96654https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-96654https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2026/va-26-266-01.jsonhttps://zmain.info/blog/plex2shellhttps://github.com/code-zm/plex2shell
- Codename
- Not available
- Detectable with
- Network Scanner
- Scan engine
- Nuclei
- Cisa Kev
Yes- Exploitable with Sniper
- No
- CVE Published
- Sep 23, 2026
- Detection added at
- Software Type
- Not available
- Vendor
- plex
- Product
- plex_media_server
Detect this vulnerability now!
Check your clients' targets (or your own) for this vulnerability and thousands more! Get proof for validation with our ethical hacking toolkit.