CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2026-09-23
Plex Media Server SSRF Vulnerability Advisory (CVE-2026-96652) - Internal Network Pivoting and Request Forgery
[Affected Scope] All Plex Media Server installations prior to version 1.43.3.10861.
[Impact] Authenticated attackers with a valid X-Plex-Token can force the server to perform unauthorized HTTP POST requests to arbitrary internal or external destinations.
[Mitigation] Immediately update Plex Media Server to version 1.43.3.10861 or later.