Tag
#Plex
Plex2Shell: Plex RCE Exploited in the Wild (CVE-2026-96656)
Four chained flaws in Plex Media Server before 1.43.3.10861 let an unauthenticated attacker run code as the Plex user; exploited in the wild since October 17, 2026.
Oct 25, 2026