🤖 Plex2Shell: CISA warns attackers are actively chaining four Plex Media Server flaws (CVE-2026-96652/96654/96655/96656) — unauth SSRF, URL injection, transcoder SSRF and arbitrary file write — into RCE. Chain rated CVSS 9.8. Fixed in 1.43.3.10861 (Aug 4), now in KEV.
🔗 https://www.bleepingcomputer.com/news/security/cisa-hackers-chain-plex-flaws-in-plex2shell-attacks-to-breach-servers/
#CVE #Exploit #CyberSec #InfoSec
BleepingComputerCISA: Hackers chain Plex flaws in Plex2Shell attacks to breach serversThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning that attackers are actively exploiting four vulnerabilities in Plex Media Server.