Attack list
Plex
5 attacked bugs
Yes. Attackers are using Plex bugs right now.
What to do
Update Plex Media Server from its settings, or from your NAS app center.
Attackers keep using these against anything that hasn't updated. Updating closes them.
BugConfirmed in attacks
- Plex Media Server flaw lets an admin write files that runCVE-2026-96656Oct 20, 2026
- Plex Media Server can be tricked into making outside requestsCVE-2026-96655Oct 20, 2026
- Plex Media Server flaw lets attackers call other pluginsCVE-2026-96654Oct 20, 2026
- Plex Media Server can be forced to send data to attackersCVE-2026-96652Oct 20, 2026
- Plex Media Server bug: server remote code executionCVE-2020-5741Mar 10, 2023
From the US government's list of bugs confirmed in real attacks (CISA KEV). Check everything you use.