ssvc@ssvc@infosec.exchange
Plex2Shell chain exploited in the wild for cryptomining against Plex media servers: https://www.boredhackerblog.info/2026/10/plex-vulnerabilities-being-exploited-in.html
- CVE-2026-96652 (5.3 med) Plex Media Server SSRF
- CVE-2026-96654 (6.9 med) Plex Media Server URL injection
- CVE-2026-96655 (5.3 med) Plex Media Server arbitrary-host SSRF
- CVE-2026-96656 (8.6 high) Plex Media Server arbitrary file write
