Plex vulnerabilities

Products

• Media Server 19
• Media Server 16
• Plex.tv Backend 2

Newest

• plex media server Plex Media Server arbitrary file write CVE-2026-96656 In KEVPublic exploit 8.6 HighSeptember 23, 2026
• plex media server Plex Media Server arbitrary-host SSRF CVE-2026-96655 In KEV 5.3 MediumSeptember 23, 2026
• plex media server Plex Media Server URL injection CVE-2026-96654 In KEV 6.9 MediumSeptember 23, 2026
• plex media server Plex Media Server SSRF CVE-2026-96652 In KEVPublic exploit 5.3 MediumSeptember 23, 2026
• plex media server Plex Media Server path traversal CVE-2026-96651 7.1 HighSeptember 23, 2026
• plex media server, plex.tv backend +1 more In the plex.tv backend for Plex Media Server (PMS) through 2025-12-31, a non-server device token... CVE-2025-69417 5.0 MediumJanuary 2, 2026
• plex media server, plex.tv backend +1 more In the plex.tv backend for Plex Media Server (PMS) through 2025-12-31, a non-server device token... CVE-2025-69416 5.0 MediumJanuary 2, 2026
• plex media server In Plex Media Server (PMS) through 1.42.2.10156, ability to access /myplex/account with a device... CVE-2025-69415 7.1 HighJanuary 2, 2026
• plex media server Plex Media Server (PMS) through 1.42.2.10156 allows retrieval of a permanent access token via a ... CVE-2025-69414 8.5 HighJanuary 2, 2026
• plex media server Plex Media Server (PMS) versions 1.41.7.x through 1.42.0.x are affected by an unspecified... CVE-2025-34158 Public exploit 8.5 HighAugust 21, 2025
• plex media server Serviio Media Server Unauthenticated Command Injection via checkStreamUrl VIDEO Parameter CVE-2025-34101 Public exploit 9.3 CriticalJuly 10, 2025
• plex media server, sick baggage analytics, field analytics +3 more +5 more Missing HTTP Security Headers CVE-2025-49193 4.2 MediumJune 12, 2025
• plex media server Authorization bypass through user-controlled key vulnerability in streaming service in Synology... CVE-2024-4464 7.5 HighDecember 18, 2024
• plex media server Plex media server 1.21 and before is vulnerable to ddos reflection attack via plex service. CVE-2021-33959 Public exploit EPSS 15.0% 7.5 HighJanuary 18, 2023
• plex media server Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in cgi... CVE-2022-22683 10.0 CriticalJuly 28, 2022
• plex media server Exposure of sensitive information to an unauthorized actor vulnerability in web server in... CVE-2022-27614 5.3 MediumJuly 28, 2022
• plex media server An issue was discovered in Plex Media Server through 1.24.4.5081-e362dc1ee. An attacker (with a... CVE-2021-42835 Public exploit 7.0 HighDecember 8, 2021
• plex media server Server-Side Request Forgery (SSRF) vulnerability in cgi component in Synology Media Server before... CVE-2021-34808 5.8 MediumJune 18, 2021
• plex media server, plex, inc. plex media server +1 more Improper Access Control in Plex Media Server prior to June 15, 2020 allows any origin to execute... CVE-2020-5742 8.8 HighJune 15, 2020
• plex media server Deserialization of Untrusted Data in Plex Media Server on Windows allows a remote, authenticated... CVE-2020-5741 In KEVPublic exploit EPSS 72.9% 7.2 HighMay 8, 2020
• plex media server Improper Input Validation in Plex Media Server on Windows allows a local, unauthenticated... CVE-2020-5740 7.8 HighApril 22, 2020
• plex media server The Camera Upload functionality in Plex Media Server through 1.18.2.2029 allows remote... CVE-2019-19141 8.8 HighDecember 19, 2019
• plex media server Plex Media Server 1.18.2.2029-36236cc4c allows remote attackers to bypass intended access control... CVE-2018-21031 6.5 MediumNovember 18, 2019
• plex media server In Plex Media Server 1.13.2.5154, the XML parsing engine for SSDP/UPnP functionality is... CVE-2018-13415 Public exploit EPSS 31.5% 9.8 CriticalAugust 13, 2018
• plex media server SQL injection vulnerability in UPnP DMA in Synology Media Server before 1.7.6-2842 and before 1.4... CVE-2018-8914 7.3 HighMay 10, 2018
• plex media server Plex Media Server before 0.9.9.3 allows remote attackers to bypass the web server whitelist,... CVE-2014-9304 Public exploit 7.5 HighDecember 7, 2014
• plex media server Multiple directory traversal vulnerabilities in Plex Media Server before 0.9.9.3 allow remote... CVE-2014-9181 Public exploit 5.0 MediumDecember 2, 2014