Vendor

Plex

5 of 5 Plex CVEs in Patchfirst (100%) are in of vulnerabilities exploited in the wild.

CVEs: 5
In CISA KEV: 5100%
Known ransomware use: 0
Median days to KEV: 27; from publication
Latest KEV listing: 20 Oct 2026

Watch Plex Subscribe (RSS) JSON Feed All feeds

Products

In KEVOther CVEs

ProductKEVCVEs
Media Server In KEV: 5 CVEs: 5

Top ATT&CK techniques

What attackers do with Plex CVEs

TechniqueCVEs
T1190Exploit Public-Facing Application CVEs: 4
T1059Command and Scripting Interpreter CVEs: 3
T1090Proxy CVEs: 2
T1078Valid Accounts CVEs: 1

Open in ATT&CK Navigator

A layer for MITRE’s ATT&CK Navigator: techniques scored by the highest Patchfirst priority among their CVEs, neutral to red, with the CVE ids in each comment. “Open in Navigator” loads https://patchfirst.co/navigator/vendor/plex.json. Or download it and in Navigator choose Open Existing Layer → Upload from local.

Counts are Plex CVEs linked to the technique. Each link’s provenance is on the CVE page.

Plex CVEs

5 CVEs, by priority

CVE-2026-96656Plex Media Server External Control of File Name or Path Vulnerability
Plex · Media ServerKEVPublic exploitHigh · 7.2T1078Valid Accounts T1059Command and Scripting Interpreter
1.8%Top 22%
73.1priority
CVE-2026-96652Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability
Plex · Media ServerKEVPublic exploitMedium · 4.3T1190Exploit Public-Facing Application T1090Proxy
1.8%Top 21%
71.2priority
CVE-2026-96654Plex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page Vulnerability
Plex · Media ServerKEVMedium · 6.5T1190Exploit Public-Facing Application T1059Command and Scripting Interpreter
1.9%Top 20%
68.0priority
CVE-2020-5741Plex Media Server Remote Code Execution Vulnerability
Plex · Media ServerKEVPublic exploitHigh · 7.2T1190Exploit Public-Facing Application T1059Command and Scripting Interpreter
72.9%Top 0.55%
67.9priority
CVE-2026-96655Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability
Plex · Media ServerKEVMedium · 4.3T1190Exploit Public-Facing Application T1090Proxy
1.6%Top 24%
65.7priority