PulseAugur
EN
LIVE 16:16:27

Plex Media Server vulnerabilities (Plex2Shell) actively exploited, CISA adds to KEV list

By PulseAugur Editorial · [1 sources] ·

Multiple vulnerabilities in Plex Media Server, collectively known as Plex2Shell, are being actively exploited to achieve remote code execution on older versions of the software. These chained vulnerabilities, identified by CVE-2026-96652, CVE-2026-96654, CVE-2026-96655, and CVE-2026-96656, are listed on the CISA Known Exploited Vulnerabilities (KEV) catalog. QNAP NAS owners are particularly affected, and users are advised to update to Plex version 1.43.3.10861 or later, and to take additional security measures such as reinstalling Plex and rotating passwords if the server was exposed to the internet. AI

IMPACT Users of Plex Media Server should update immediately to patch critical vulnerabilities that allow for unauthenticated remote code execution.

RANK_REASON The cluster describes actively exploited vulnerabilities in a widely used software product, leading to its inclusion in the CISA KEV catalog, which is a significant security event for users of that product.

Read on Mastodon — mastodon.social →

AI-generated summary · Google Gemini · from 1 sources. How we write summaries →

Plex Media Server vulnerabilities (Plex2Shell) actively exploited, CISA adds to KEV list

How we ranked this

Signal score
2 / 100
Composite score across the factors below. Higher = stronger signal that this story matters right now.
Newsworthiness bucket
Tool
The cluster describes actively exploited vulnerabilities in a widely used software product, leading to its inclusion in the CISA KEV catalog, which is a significant security event for users of that…
Source corroboration
Single-source cluster
Only one publisher covered this so far. Single-source stories can still rank when the publisher is high-authority, but they lack cross-source corroboration.
Topics
product, other
Editorial topic classification. Feeds into how the story surfaces on /topic/<slug> hub pages and into the per-entity coverage mix.
AI-industry relevance
Low
Off-topic or adjacent — cluster remains reachable but doesn't surface in AI-industry rankings.
Story freshness
Breaking (< 6h)
Fresh story with cross-source coverage still developing. Ranking may shift as more sources report.

Full methodology in our editorial standards.

COVERAGE [1]

  1. Mastodon — mastodon.social TIER_1 English(EN) · burso ·

    Plex2Shell is being exploited at scale: 4 chained Plex Media Server bugs (CVE-2026-96652, -96654, -96655, -96656; all in CISA KEV) allow unauthenticated RCE on

    Plex2Shell is being exploited at scale: 4 chained Plex Media Server bugs (CVE-2026-96652, -96654, -96655, -96656; all in CISA KEV) allow unauthenticated RCE on 1.43.2 and older. QNAP says NAS owners are getting hit. Update to 1.43.3.10861 or later. If Plex was reachable from the …

RELATED ENTITIES

RELATED TOPICS