{"id":"CVE-2026-96656","url":"https://compromised.live/t/CVE-2026-96656","kind":"exploited_vuln","tier":2,"severity":"high","title":"Plex Media Server: Plex Media Server External Control of File Name or Path Vulnerability","summary":"An attacker who already has admin access can write arbitrary files to the server, and those files may run when loaded, letting them take control. This flaw is being exploited in the wild and can be chained with other flaws. Plex Media Server. Apply the vendor's update now and check for signs of compromise.","summary_source":"ai","affected":[],"epss":null,"kev":{"date_added":"2026-10-20","due_date":"2026-10-23","ransomware":false},"first_seen":"2026-11-03T21:55:44.095Z","updated_at":"2026-11-03T21:55:44.095Z","status":"active","details":"Plex Media Server contains an external control of file name or path vulnerability which can allow an admin user to write arbitrary files that may be executed on load. This vulnerability can be chained with CVE-2026-96652, CVE-2026-96654, and CVE-2026-96655.","aliases":["CVE-2026-96656"],"sources":[{"name":"kev","id":"CVE-2026-96656","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-96656"}]}