Advisories · Technology

Plex Media Server.

Every CVE that names Plex Media Server among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-96656 CVE record

CVSS 8.6 HighCritical · KEVKEV

Plex Media Server arbitrary file write
- Plex Media Server
- Path traversal
Not analysed yet 23 Sept 2026
CVE-2026-96655 CVE record

CVSS 5.3 MediumCritical · KEVKEV

Plex Media Server arbitrary-host SSRF
- Plex Media Server
- Server-side request forgery (SSRF)
Not analysed yet 23 Sept 2026
CVE-2026-96654 CVE record

CVSS 6.9 MediumCritical · KEVKEV

Plex Media Server URL injection
- Plex Media Server
- CWE-84
Not analysed yet 23 Sept 2026
CVE-2026-96652 CVE record

CVSS 5.3 MediumCritical · KEVKEV

Plex Media Server SSRF
- Plex Media Server
- Server-side request forgery (SSRF)
Not analysed yet 23 Sept 2026
CVE-2026-96651 CVE record

CVSS 7.1 High

Plex Media Server path traversal
- Plex Media Server
- Path traversal
Not analysed yet 23 Sept 2026
CVE-2025-69415 CVE record

CVSS 7.1 High

Plex Media Server: In Plex Media Server (PMS) through 1.42.2.10156…
- Plex Media Server
- CWE-672
Not analysed yet 2 Jan 2026
CVE-2025-69414 CVE record

CVSS 8.5 High

Incorrect authorization in Plex Media Server
- Plex Media Server
- Broken access control
Not analysed yet 2 Jan 2026
CVE-2025-34158 CVE record

CVSS 8.5 High

Plex Media Server: Plex Media Server (PMS) 1.41.7.x through 1.42.0.x before 1.42.1 is affected by incorrect…
- Plex Media Server
- CWE-669
Not analysed yet 21 Aug 2025
CVE-2020-5742 CVE record

Plex Media Server: Improper Access Control in Plex Media Server prior to June 15…
- Plex Media Server
Not analysed yet 15 Jun 2020