Known Vulnerabilities for Plex Media Server by Plex
Listed below are 3 of the newest known vulnerabilities associated with "Plex Media Server" by "Plex".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-96656 json | Plex Media Server before 1.43.3.10861 allows an admin user to write arbitrary files that may be executed on load. The prefere... | Not Provided | 2026-09-23 | 2026-09-23 |
| CVE-2026-96655 json | Plex Media Server before 1.43.3.10861 allows an authenticated user to request arbitrary internal or external addresses via th... | Not Provided | 2026-09-23 | 2026-09-23 |
| CVE-2026-96654 json | Plex Media Server before 1.43.3.10861 does not correctly neutralize URL values included in 'searchOne,' allowing an attacker ... | Not Provided | 2026-09-23 | 2026-09-23 |
| CVE-2026-96652 json | Plex Media Server before 1.43.3.10861 allows SSRF via '/player/timeline'. An attacker using any X-Plex-Token value can includ... | Not Provided | 2026-09-23 | 2026-09-23 |
| CVE-2026-96651 json | Plex Media Server before 1.43.3.10861 builds a file path from the url parameter without checking it for ../ sequences, allowi... | Not Provided | 2026-09-23 | 2026-09-23 |
| CVE-2026-73291 json | Seerr is an open-source media request and discovery manager for Jellyfin, Plex, and Emby. Prior to version 3.4.0, Seerr's Ima... | Not Provided | 2026-08-12 | 2026-08-13 |
| CVE-2026-54915 json | Tautulli is a Python based monitoring and tracking tool for Plex Media Server. Prior to 2.17.2, the unauthenticated /auth/red... | Not Provided | 2026-09-21 | 2026-09-21 |
| CVE-2026-52835 json | Tautulli is a Python based monitoring and tracking tool for Plex Media Server. Prior to 2.17.2, the import_config handler and... | Not Provided | 2026-09-21 | 2026-09-21 |
| CVE-2026-49995 json | Tautulli is a Python based monitoring and tracking tool for Plex Media Server. Prior to 2.17.2, the newsletter cron field sto... | Not Provided | 2026-09-21 | 2026-09-22 |
| CVE-2026-45381 json | Tautulli is a Python based monitoring and tracking tool for Plex Media Server. Prior to 2.17.2, the /search endpoint inserts ... | Not Provided | 2026-09-21 | 2026-09-21 |