CVE-2026-96655
Plex Media Server
Patch now: it is being exploited
Plex Media Server before 1.43.3.10861 allows an authenticated user to request arbitrary internal or external addresses via the '/video/:/transcode/universal' path parameter.
Cybersecurity from Málaga · Networks, lures and threats
Plex Media Server
Patch now: it is being exploited
Plex Media Server before 1.43.3.10861 allows an authenticated user to request arbitrary internal or external addresses via the '/video/:/transcode/universal' path parameter.