Known Vulnerabilities for Plex Media Server by Plex
Listed below are 3 of the newest known vulnerabilities associated with "Plex Media Server" by "Plex".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-43986 json | Tautulli is a Python based monitoring and tracking tool for Plex Media Server. Versions prior to 2.17.1 expose a public `/ima... | Not Provided | 2026-06-04 | 2026-06-04 |
| CVE-2026-43985 json | Tautulli is a Python based monitoring and tracking tool for Plex Media Server. Versions prior to 2.17.1 expose `configUpdate`... | Not Provided | 2026-06-04 | 2026-06-04 |
| CVE-2026-43984 json | Tautulli is a Python based monitoring and tracking tool for Plex Media Server. Versions prior to 2.17.1 expose `log_js_errors... | Not Provided | 2026-06-04 | 2026-06-04 |
| CVE-2026-41065 json | Tautulli is a Python based monitoring and tracking tool for Plex Media Server. Versions prior to 2.17.1 are vulnerable to rem... | Not Provided | 2026-06-04 | 2026-06-04 |
| CVE-2026-40605 json | Tautulli is a Python based monitoring and tracking tool for Plex Media Server. Prior to version 2.17.1, a path traversal vuln... | Not Provided | 2026-06-04 | 2026-06-04 |
| CVE-2020-5741 json | Deserialization of Untrusted Data in Plex Media Server on Windows allows a remote, authenticated attacker to execute arbitrar... | 7.2 - HIGH | 2020-05-08 | 2021-12-14 |
| CVE-2020-5740 json | Improper Input Validation in Plex Media Server on Windows allows a local, unauthenticated attacker to execute arbitrary Pytho... | 7.8 - HIGH | 2020-04-22 | 2021-12-10 |
| CVE-2018-21031 json | Tautulli versions 2.1.38 and below allows remote attackers to bypass intended access control in Plex Media Server because the... | 6.5 - MEDIUM | 2019-11-18 | 2022-04-18 |