🔴 EXPLOITED
Four Plex Media Server flaws chain into remote code execution with no login, all now flagged by CISA as exploited.
Internet-facing Plex below build 1.43.3.10861 is the target, abused for crypto mining and proxying.
Patch now. (CVE-2026-96652)
https://suriq.io/blog/plex-media-server-cve-2026-96652-exploited-rce-chain
SuriqPlex Media Server CVE-2026-96652: Exploited RCE ChainFour Plex Media Server flaws (CVE-2026-96652 to 96656) chain into unauthenticated RCE, now CISA KEV-listed, exploited for cryptomining. Patch to 1.43.3.10861.