CVE Product CVSS EPSS Added Due Flags Description
CVE-2026-96654 Media Server — 0.0195 2026-10-20 2026-10-23 Plex Media Server contains an improper neutralization of encoded URI schemes in
CVE-2026-96652 Media Server — 0.0182 2026-10-20 2026-11-03 Plex Media Server contains a server-side request forgery (SSRF) vulnerability wh
CVE-2026-96656 Media Server — 0.0179 2026-10-20 2026-10-23 Plex Media Server contains an external control of file name or path vulnerabilit
CVE-2026-96655 Media Server — 0.0164 2026-10-20 2026-11-03 Plex Media Server contains a server-side request forgery (SSRF) vulnerability th
CVE-2020-5741 Media Server — — 2023-03-10 2023-03-31 Plex Media Server contains a remote code execution vulnerability that allows an