Six weeks from notice to KEV: the disclosure timeline behind the Plex RCE chain
Technical analysis of the Plex Media Server vulnerability chain fixed in 1.43.3.10861, covering mechanism, exposure, detection and remediation.
Tag archive
Technical analysis of the Plex Media Server vulnerability chain fixed in 1.43.3.10861, covering mechanism, exposure, detection and remediation.
Technical analysis of the Plex Media Server vulnerability chain fixed in 1.43.3.10861, covering mechanism, exposure, detection and remediation.
CVE-2026-102490 turned application-level code execution into root because the packaged service ran files the service account could write.
Exposed Node.js services and CVE-2026-111497: reading a five-million-asset signal...
Variant 7 analysis of four NSD stack overwrite flaws fixed in 4.15.3, with measured ZoomEye exposure context.
Technical analysis of the Plex Media Server vulnerability chain fixed in 1.43.3.10861, covering mechanism, exposure, detection and remediation.
Technical analysis of the Plex Media Server vulnerability chain fixed in 1.43.3.10861, covering mechanism, exposure, detection and remediation.
Technical analysis of the Plex Media Server vulnerability chain fixed in 1.43.3.10861, covering mechanism, exposure, detection and remediation.
Variant 5 analysis of four NSD stack overwrite flaws fixed in 4.15.3, with measured ZoomEye exposure context.

PHP2Shell and Node2Shell: two core RCEs, CVSS 9.2, no auth, patched in days. AWS saw attempts four days before the patch.
Variant 6 analysis of four NSD stack overwrite flaws fixed in 4.15.3, with measured ZoomEye exposure context.
Variant 4 analysis of four NSD stack overwrite flaws fixed in 4.15.3, with measured ZoomEye exposure context.