Known Vulnerabilities for Media Server by Plex
Listed below are 10 of the newest known vulnerabilities associated with "Media Server" by "Plex".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-120441 json | OwnTone Server through 29.3 contains an sql injection vulnerability in mpd_sticker_find() in src/mpd.c that allows unauthenti... | Not Provided | 2026-11-02 | 2026-11-02 |
| CVE-2026-119651 json | HuLa-Server through 3.0.7 contains an insecure direct object reference vulnerability in FeedController.delFeed that allows au... | Not Provided | 2026-10-30 | 2026-11-04 |
| CVE-2026-118043 json | The Bulk Media Register WordPress plugin before 2.01 does not properly validate a user-supplied path before moving a file on ... | Not Provided | 2026-10-31 | 2026-11-01 |
| CVE-2026-116789 json | FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a sof... | Not Provided | 2026-11-05 | 2026-11-05 |
| CVE-2026-116682 json | FileBrowser Quantum is a free, self-hosted, web-based file manager. Prior to 1.5.2-stable and 2.0.1-beta, file read handling ... | Not Provided | 2026-10-27 | 2026-11-02 |
| CVE-2026-116256 json | A vulnerability was found in geesondog RhaPHP up to 7ae639ccf8dcb627faace096d030bd4cb4cfb905. Affected by this vulnerability ... | Not Provided | 2026-10-26 | 2026-10-26 |
| CVE-2026-115932 json | When a post is published, Postiz treats a media path that is not a web address as a file on the server's disk, but it does no... | Not Provided | 2026-10-24 | 2026-11-02 |
| CVE-2026-115188 json | An unrestricted file upload vulnerability exists in the campaign import feature of Mautic 7. When processing an uploaded camp... | Not Provided | 2026-10-26 | 2026-10-26 |
| CVE-2026-114422 json | The Enable Media Replace WordPress plugin before 4.2.3 does not restrict the classes allowed when deserializing stored metada... | Not Provided | 2026-10-30 | 2026-10-30 |
| CVE-2026-114379 json | A flaw has been found in EKKOLearnAI ekko-studio up to 1.0.6. This vulnerability affects the function saveGeneratedImages of ... | Not Provided | 2026-10-21 | 2026-10-28 |