Plex
5 Plex flaws are on CISA's list of vulnerabilities attackers have used, 4 of them added in 2026. The latest was added Oct 20, 2026.
5on CISA's list, all time
4added in 2026
4in the last 90 days
0used by ransomware
0zero-days, all time
Exploited flaws added each year
Most-hit products
| Product | Exploited flaws | Most recent |
|---|---|---|
| Media Server | 5 | Oct 20, 2026 |
Latest Plex flaws
- Media ServerPlex Media Server Server-Side Request Forgery (SSRF) Vulnerability
- Media ServerPlex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page Vulnerability
- Media ServerPlex Media Server Server-Side Request Forgery (SSRF) Vulnerability
- Media ServerPlex Media Server External Control of File Name or Path Vulnerability
- Media ServerPlex Media Server Remote Code Execution Vulnerability
Counts come from CISA's Known Exploited Vulnerabilities catalog, which lists flaws with reliable evidence of real attacks. A higher count often reflects how widely a vendor's products are used and targeted, not only how secure they are.