VIRY.CZRADAR
sektor
téma
typ textu

← nejvýznamnější zprávy · všechny zprávy

poslední zpráva

SPOJENO AI KEV ✓ (4 z 4) EPSS 0.01 (nejvyšší)

Plex Media Server: rilevato sfruttamento in rete delle catena di attacco Plex2Shell

Rilevato lo sfruttamento attivo in rete delle vulnerabilità CVE-2026-96652 CVE-2026-96654 CVE-2026-96655 e CVE-2026-96656 - già sanate dal vendor - relative a Plex Media Server. Si evidenzia che risulta disponibile in rete un Proof of Concept (PoC) per lo sfruttamento concatenato di tali vulnerabilità.

Číst originál na CSIRT Itálie (ACN) →

5 zpráv z 2 zdrojů · první · zachyceno CZ · EN/orig

Plex IT US

tg: zneužíváno tg: zranitelnost

CVE v události 4

CVEhodnoceníKEVEPSS
CVE-2026-96652 5.3 4.0 · cisa-cg 4.3 3.1 · cisa-cg KEV ✓ 0.00
CVE-2026-96654 6.9 4.0 · cisa-cg 6.5 3.1 · cisa-cg KEV ✓ 0.00
CVE-2026-96655 5.3 4.0 · cisa-cg 4.3 3.1 · cisa-cg KEV ✓ 0.00
CVE-2026-96656 8.6 4.0 · cisa-cg 7.2 3.1 · cisa-cg KEV ✓ 0.01

Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE.

Jak se o tom psalo 5

  1. · CSIRT Itálie (ACN) IT nadpis události

    Plex Media Server: rilevato sfruttamento in rete delle catena di attacco Plex2Shell

    Rilevato lo sfruttamento attivo in rete delle vulnerabilità CVE-2026-96652 CVE-2026-96654 CVE-2026-96655 e CVE-2026-96656 - già sanate dal vendor - relative a Plex Media Server. Si evidenzia che risulta disponibile in rete un Proof of Concept (PoC) per lo sfruttamento concatenato di tali vulnerabilità.

  2. · zachyceno · CISA KEV US

    Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-96652)

    CISA added CVE-2026-96652 to the Known Exploited Vulnerabilities catalog. Affected product: Plex Media Server. Remediation due date: 2026-11-03.

  3. · zachyceno · CISA KEV US

    Plex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page Vulnerability (CVE-2026-96654)

    CISA added CVE-2026-96654 to the Known Exploited Vulnerabilities catalog. Affected product: Plex Media Server. Remediation due date: 2026-10-23.

  4. · zachyceno · CISA KEV US

    Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-96655)

    CISA added CVE-2026-96655 to the Known Exploited Vulnerabilities catalog. Affected product: Plex Media Server. Remediation due date: 2026-11-03.

  5. · zachyceno · CISA KEV US

    Plex Media Server External Control of File Name or Path Vulnerability (CVE-2026-96656)

    CISA added CVE-2026-96656 to the Known Exploited Vulnerabilities catalog. Affected product: Plex Media Server. Remediation due date: 2026-10-23.