Plex Media Server vulnerabilities

• plex media server Plex Media Server arbitrary file write CVE-2026-96656 In KEVPublic exploit 8.6 HighSeptember 23, 2026
• plex media server Plex Media Server arbitrary-host SSRF CVE-2026-96655 In KEV EPSS 10.7% 5.3 MediumSeptember 23, 2026
• plex media server Plex Media Server URL injection CVE-2026-96654 In KEV 6.9 MediumSeptember 23, 2026
• plex media server Plex Media Server SSRF CVE-2026-96652 In KEVPublic exploit EPSS 11.9% 5.3 MediumSeptember 23, 2026
• plex media server Plex Media Server path traversal CVE-2026-96651 7.1 HighSeptember 23, 2026
• plex media server, plex.tv backend +1 more In the plex.tv backend for Plex Media Server (PMS) through 2025-12-31, a non-server device token... CVE-2025-69417 5.0 MediumJanuary 2, 2026
• plex media server, plex.tv backend +1 more In the plex.tv backend for Plex Media Server (PMS) through 2025-12-31, a non-server device token... CVE-2025-69416 5.0 MediumJanuary 2, 2026
• plex media server In Plex Media Server (PMS) through 1.42.2.10156, ability to access /myplex/account with a device... CVE-2025-69415 7.1 HighJanuary 2, 2026
• plex media server Plex Media Server (PMS) through 1.42.2.10156 allows retrieval of a permanent access token via a ... CVE-2025-69414 8.5 HighJanuary 2, 2026
• plex media server Plex media server 1.21 and before is vulnerable to ddos reflection attack via plex service. CVE-2021-33959 Public exploit EPSS 15.0% 7.5 HighJanuary 18, 2023
• plex media server An issue was discovered in Plex Media Server through 1.24.4.5081-e362dc1ee. An attacker (with a... CVE-2021-42835 Public exploit 7.0 HighDecember 8, 2021
• plex media server, plex, inc. plex media server +1 more Improper Access Control in Plex Media Server prior to June 15, 2020 allows any origin to execute... CVE-2020-5742 8.8 HighJune 15, 2020
• plex media server Deserialization of Untrusted Data in Plex Media Server on Windows allows a remote, authenticated... CVE-2020-5741 In KEVPublic exploit EPSS 72.9% 7.2 HighMay 8, 2020
• plex media server Improper Input Validation in Plex Media Server on Windows allows a local, unauthenticated... CVE-2020-5740 7.8 HighApril 22, 2020
• plex media server The Camera Upload functionality in Plex Media Server through 1.18.2.2029 allows remote... CVE-2019-19141 8.8 HighDecember 19, 2019
• plex media server Plex Media Server 1.18.2.2029-36236cc4c allows remote attackers to bypass intended access control... CVE-2018-21031 6.5 MediumNovember 18, 2019
• plex media server In Plex Media Server 1.13.2.5154, the XML parsing engine for SSDP/UPnP functionality is... CVE-2018-13415 Public exploit EPSS 31.5% 9.8 CriticalAugust 13, 2018
• plex media server Plex Media Server before 0.9.9.3 allows remote attackers to bypass the web server whitelist,... CVE-2014-9304 Public exploit 7.5 HighDecember 7, 2014
• plex media server Multiple directory traversal vulnerabilities in Plex Media Server before 0.9.9.3 allow remote... CVE-2014-9181 Public exploit 5.0 MediumDecember 2, 2014