Hvězdička u CVE znamená, že jsem to číslo vytáhl z širšího textu článku. Neukazuju u něj proto KEV, EPSS ani CVSS, a to preventivně, protože článek se na něj mohl jen odkazovat, třeba jako na starší kauzu.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning that attackers are actively exploiting four vulnerabilities in Plex Media Server. [...]
CVE-2026-106931 * CVE-2026-110936 * CVE-2026-96652 * CVE-2026-96654 * CVE-2026-96655 * CVE-2026-96656 * Plex US
Rilevato lo sfruttamento attivo in rete delle vulnerabilità CVE-2026-96652 CVE-2026-96654 CVE-2026-96655 e CVE-2026-96656 - già sanate dal vendor - relative a Plex Media Server. Si evidenzia che risulta disponibile in rete un Proof of Concept (PoC) per lo sfruttamento concatenato di tali vulnerabilità.
KEV ✓ EPSS 0.02 CVE-2026-96652 CVE-2026-96654 CVE-2026-96655 CVE-2026-96656 Plex IT
CISA added CVE-2026-96652 to the Known Exploited Vulnerabilities catalog. Affected product: Plex Media Server. Remediation due date: 2026-11-03.
KEV ✓ EPSS 0.02 CVE-2026-96652 Plex US
CISA added CVE-2026-96654 to the Known Exploited Vulnerabilities catalog. Affected product: Plex Media Server. Remediation due date: 2026-10-23.
KEV ✓ EPSS 0.02 CVE-2026-96654 Plex US
CISA added CVE-2026-96655 to the Known Exploited Vulnerabilities catalog. Affected product: Plex Media Server. Remediation due date: 2026-11-03.
KEV ✓ EPSS 0.02 CVE-2026-96655 Plex US
CISA added CVE-2026-96656 to the Known Exploited Vulnerabilities catalog. Affected product: Plex Media Server. Remediation due date: 2026-10-23.
KEV ✓ EPSS 0.02 CVE-2026-96656 Plex US
Over 36,000 Plex Media servers exposed online remain unpatched against multiple security vulnerabilities and are vulnerable to attacks. [...]