Plex: exploited vulnerabilities
- 5exploited vulnerabilities
- 0used by ransomware
- Oct 20, 2026latest one added
| Added | Vulnerability | Product | Severity | Attack chance |
|---|---|---|---|---|
| Oct 20, 2026 | External Control of File Name or Path | Media Server | High 8.6 | 1.8% |
| Oct 20, 2026 | Server-Side Request Forgery (SSRF) | Media Server | Medium 5.3 | 1.6% |
| Oct 20, 2026 | Improper Neutralization of Encoded URI Schemes in a Web Page | Media Server | Medium 6.9 | 1.9% |
| Oct 20, 2026 | Server-Side Request Forgery (SSRF) | Media Server | Medium 5.3 | 1.8% |
| Mar 10, 2023 | Remote Code Execution | Media Server | High 7.2 | 73% |
Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.