Tag archive
After Plex2Shell: A Detection and Recovery Checklist for Media Servers You Cannot Rebuild Blindly
The Payoff Behind Plex2Shell: Why Home Media Servers Become Proxy and Mining Nodes
Four chained CVEs give unauthenticated code execution on Plex Media Server, and CISA put all four in its exploited catalogue. The patched build came out on 4 Au
CWE-73 in Practice: How Controlled File Paths Become Code Execution in Plex
Four Moderate Flaws, One Critical Chain: What the Plex2Shell Disclosure Teaches Vulnerability Research
Shadow Media Servers: When a Plex Box on the Corporate LAN Becomes an Incident
Remote Access by Default: Auditing the Plex Port Forwards That Made Plex2Shell Exploitable
Patched in August, Exploited in October: The Plex KEV Deadline and What Patch Governance Missed
CISA added four Plex Media Server vulnerabilities known as Plex2Shell to its Known Exploited Vulnerabilities catalog. Researchers demonstrated they can be
Detecting CVE-2026-96655 exploitation in Plex logs
Designing a reverse proxy that survives a Plex SSRF
The Plex patch cluster: why one CVE is not the whole story