Index

Search

Search the public record. Drafts and scheduled notes are not included.

threats

Plex2Shell chain (CVE-2026-96652, -96654, -96655, -96656) has a public PoC and one honeypot hit

Four Plex Media Server CVEs form the Plex2Shell chain, which a researcher says gives unauthenticated remote code execution. A public repository covers it. One researcher saw the published code used against a honeypot on 17 October 2026 and a cryptominer dropped. Fixed in 1.43.3.10861. Not in CISA KEV as of check.

Published 4h ago

MediumActive Exploitation

CVE-2026-96652

Plex Media Server SSRF in /player/timeline

SSRF

Published 23 Sept 2026