Skip to content
Vulnerability intelligence

CVE-2026-96652: Plex Media Server server-side request forgery

Plex2Shell chains four flaws. One researcher's decoy server saw a miner and a proxy program installed.

CVSS 5.3 2026