Plex Is Being Exploited. The Fix Shipped Eleven Weeks Earlier.
A media server is the most forgivable thing to expose to the internet. It is also, this month, the most expensive. On 20 October 2026 CISA added four Plex Media Server vulnerabilities to its Known Exploited Vulnerabilities catalogue at once. Chained, they let an attacker with no credentials obtain an admin token and execute code as the Plex process. The researcher who found them scores the chain 9.8. ...