Known vulnerabilities in Plex Media Server

Vendor: Plex
Software: Plex Media Server
Software CPE: cpe:2.3:a:plex:plex_media_server:*:*:*:*:*:*:*:*
Website: https://www.plex.tv/
Total vulnerabilities: 5
Public exploits: 1
Known exploited (KEV): 5

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Plex Media Server Plex Media Server is affected by 5 known vulnerabilities: 4 medium, 1 low Critical High Medium Low

Vulnerabilities (5)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU156251 - External Control of File Name or Path
CVE-2026-96656		 CWE-73 Low
No
Exploited
 1.43.3.10861 20.10.2026 SB2026102036
#VU156250 - Server-Side Request Forgery (SSRF)
CVE-2026-96655		 CWE-918 Medium
No
Exploited
 1.43.3.10861 20.10.2026 SB2026102036
#VU156249 - Improper Neutralization of Encoded URI Schemes in a Web Page
CVE-2026-96654		 CWE-84 Medium
No
Exploited
 1.43.3.10861 20.10.2026 SB2026102036
#VU156225 - Server-Side Request Forgery (SSRF)
CVE-2026-96652		 CWE-918 Medium
No
Exploited
 1.43.3.10861 20.10.2026 SB2026102036
#VU72903 - Deserialization of Untrusted Data
CVE-2020-5741		 CWE-502 Medium
Available
Exploited
 1.19.3 07.03.2023 SB2020050804