PulseAugur
中
实时 16:16:27
English(EN) Plex2Shell is being exploited at scale: 4 chained Plex Media Server bugs (CVE-2026-96652, -96654, -96655, -96656; all in CISA KEV) allow unauthenticated RCE on

Plex Media Server漏洞(Plex2Shell)被积极利用,CISA将其添加到KEV列表

Plex Media Server中的多个漏洞,统称为Plex2Shell,正在被积极利用,以便在旧版本的软件上实现远程代码执行。这些漏洞链,由CVE-2026-96652、CVE-2026-96654、CVE-2026-96655和CVE-2026-96656标识,已被列入CISA已知被利用漏洞(KEV)目录。QNAP NAS用户尤其受到影响,建议用户更新到Plex 1.43.3.10861或更高版本,并采取额外的安全措施,例如重新安装Plex以及在服务器暴露于互联网的情况下轮换密码。 AI

影响 Plex Media Server用户应立即更新以修补允许未经身份验证的远程代码执行的关键漏洞。

排序理由 该集群描述了广泛使用的软件产品中被积极利用的漏洞,导致其被列入CISA KEV目录,这对该产品的用户来说是一个重大的安全事件。

在 Mastodon — mastodon.social 阅读 →

AI 生成摘要 · Google Gemini · 来自 1 个来源。 我们如何撰写摘要 →

Plex Media Server漏洞(Plex2Shell)被积极利用,CISA将其添加到KEV列表

本文如何被排名

Signal score
2 / 100
Composite score across the factors below. Higher = stronger signal that this story matters right now.
Newsworthiness bucket
Tool
该集群描述了广泛使用的软件产品中被积极利用的漏洞,导致其被列入CISA KEV目录,这对该产品的用户来说是一个重大的安全事件。
Source corroboration
Single-source cluster
Only one publisher covered this so far. Single-source stories can still rank when the publisher is high-authority, but they lack cross-source corroboration.
Topics
product, other
Editorial topic classification. Feeds into how the story surfaces on /topic/<slug> hub pages and into the per-entity coverage mix.
AI-industry relevance
Low
Off-topic or adjacent — cluster remains reachable but doesn't surface in AI-industry rankings.
Story freshness
Breaking (< 6h)
Fresh story with cross-source coverage still developing. Ranking may shift as more sources report.

完整方法见我们的编辑标准。

报道来源 [1]

  1. Mastodon — mastodon.social TIER_1 English(EN) · burso ·

    Plex2Shell大规模被利用:4个Plex Media Server漏洞链(CVE-2026-96652、-96654、-96655、-96656;均在CISA KEV中)允许未经身份验证的远程代码执行

    Plex2Shell is being exploited at scale: 4 chained Plex Media Server bugs (CVE-2026-96652, -96654, -96655, -96656; all in CISA KEV) allow unauthenticated RCE on 1.43.2 and older. QNAP says NAS owners are getting hit. Update to 1.43.3.10861 or later. If Plex was reachable from the …