🚨Plex Security Update Fixes Critical Remote Code Execution Vulnerabilities
Plex users: critical RCE vulnerabilities patched
TL;DR
Plex has released security updates for critical remote code execution vulnerabilities in Plex Media Server v1.43.2 and earlier. The updates address chained vulnerabilities discovered by a security researcher who set up a honeypot and observed in-the-wild exploitation attempts.
Plex has released security updates to fix critical remote code execution vulnerabilities in Plex Media Server v1.43.2 and earlier. The vulnerabilities were discovered by a security researcher who set up a honeypot and observed in-the-wild exploitation attempts. If you're running an outdated version of Plex, this update is crucial to prevent unauthorized access and potential malware infections. The vulnerabilities were detailed in CVE-2026-96652, CVE-2026-96654, CVE-2026-96655, and CVE-2026-96656. The first exploitation attempt was seen on October 17th from IP address 45.194.92.222, with a cryptominer being downloaded from 217.60.194.116.
Key Points
Plex released security updates on October 16th for critical RCE vulnerabilities in Plex Media Server v1.43.2 and earlier.
CVE-2026-96652, CVE-2026-96654, CVE-2026-96655, and CVE-2026-96656 were detailed in the security announcement.
The first exploitation attempt was observed on October 17th from IP address 45.194.92.222.
A cryptominer was downloaded from IP address 217.60.194.116 during the exploitation attempts.
The researcher shared details and artifacts on GitHub, including malicious file hashes and a discussion on Reddit.
Why It Matters
If you're running an outdated version of Plex Media Server, this update is critical to prevent unauthorized access and potential malware infections. The vulnerabilities were chained together to achieve remote code execution, and in-the-wild exploitation attempts were observed. Updating to the latest version is essential to maintain security.
Comments
Be the first to comment
Enjoyed this article?
Get it daily. 7am. Free. Reads in 5 minutes.
Join 3,566 builders reading daily.