Plex Media Server <1.43.3.10861

productUS

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

EPSS ≥ 10%

critical

by severity

0critical0high0medium0low

updated 2026-10-28

vulnerabilities (5)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-96652US	—OT critical	1.82% (79th)	KEV	no fix	2026-09-23	—
CVE-2026-96656US	—OT critical	1.79% (78th)	KEV	no fix	2026-09-23	—
CVE-2026-96654US	—OT critical	1.95% (80th)	KEV	no fix	2026-09-23	—
CVE-2026-96655US	—OT critical	1.64% (76th)	KEV	no fix	2026-09-23	—
CVE-2026-96651US	—	0.83% (57th)	—	no fix	2026-09-23	—

The flaw types (CWEs) most of these CVEs share.

CWE-918Server-Side Request Forgery (SSRF)2 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1 CVEs
CWE-73External Control of File Name or Path1 CVEs
CWE-84Improper Neutralization of Encoded URI Schemes in a Web Page1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.