CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
1 advisories matched
2026-09-23
Plex Media Server 'searchOne' Plugin Function Injection Vulnerability Advisory (CVE-2026-96654)
[Affected Scope] All Plex Media Server installations prior to version 1.43.3.10861
[Impact] Attackers can manipulate 'searchOne' parameters to invoke internal plugin functions and inject arbitrary parameters, potentially leading to server compromise or unauthorized data access
[Mitigation] Immediately update Plex Media Server to version 1.43.3.10861 or later