compromised.live Free. No login.
Feed / CVE-2026-96656Also as JSON
WATCHExploited vulnerability Plex Media Server

Plex Media Server External Control of File Name or Path Vulnerability

What's happening and what to do

An attacker who already has admin access can write arbitrary files to the server, and those files may run when loaded, letting them take control. This flaw is being exploited in the wild and can be chained with other flaws. Plex Media Server. Apply the vendor's update now and check for signs of compromise.

AI summary of the sources on this page. Regenerated when a source changes.

Signals over time

  1. 2026-10-20Added to CISA's Known Exploited Vulnerabilities catalog.
  2. 2026-10-23Federal patch deadline for US agencies.
  3. 2026-11-03 21:55First seen here.

Source text

Plex Media Server contains an external control of file name or path vulnerability which can allow an admin user to write arbitrary files that may be executed on load. This vulnerability can be chained with CVE-2026-96652, CVE-2026-96654, and CVE-2026-96655.