Plex Media Server vulnerabilities

• plex media server Plex Media Server arbitrary file write CVE-2026-96656 In KEVPublic exploit 8.6 HighSeptember 23, 2026
• plex media server Plex Media Server arbitrary-host SSRF CVE-2026-96655 In KEV EPSS 10.7% 5.3 MediumSeptember 23, 2026
• plex media server Plex Media Server URL injection CVE-2026-96654 In KEV 6.9 MediumSeptember 23, 2026
• plex media server Plex Media Server SSRF CVE-2026-96652 In KEVPublic exploit EPSS 11.9% 5.3 MediumSeptember 23, 2026
• plex media server Plex Media Server path traversal CVE-2026-96651 7.1 HighSeptember 23, 2026
• plex media server In Plex Media Server (PMS) through 1.42.2.10156, ability to access /myplex/account with a device... CVE-2025-69415 7.1 HighJanuary 2, 2026
• plex media server Plex Media Server (PMS) through 1.42.2.10156 allows retrieval of a permanent access token via a ... CVE-2025-69414 8.5 HighJanuary 2, 2026
• plex media server Plex Media Server (PMS) versions 1.41.7.x through 1.42.0.x are affected by an unspecified... CVE-2025-34158 Public exploit 8.5 HighAugust 21, 2025
• plex media server Serviio Media Server Unauthenticated Command Injection via checkStreamUrl VIDEO Parameter CVE-2025-34101 Public exploit 9.3 CriticalJuly 10, 2025
• plex media server, sick baggage analytics, field analytics +3 more +5 more Missing HTTP Security Headers CVE-2025-49193 4.2 MediumJune 12, 2025
• plex media server Authorization bypass through user-controlled key vulnerability in streaming service in Synology... CVE-2024-4464 7.5 HighDecember 18, 2024
• plex media server Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in cgi... CVE-2022-22683 10.0 CriticalJuly 28, 2022
• plex media server Exposure of sensitive information to an unauthorized actor vulnerability in web server in... CVE-2022-27614 5.3 MediumJuly 28, 2022
• plex media server Server-Side Request Forgery (SSRF) vulnerability in cgi component in Synology Media Server before... CVE-2021-34808 5.8 MediumJune 18, 2021
• plex media server Deserialization of Untrusted Data in Plex Media Server on Windows allows a remote, authenticated... CVE-2020-5741 In KEVPublic exploit EPSS 72.9% 7.2 HighMay 8, 2020
• plex media server SQL injection vulnerability in UPnP DMA in Synology Media Server before 1.7.6-2842 and before 1.4... CVE-2018-8914 7.3 HighMay 10, 2018