Plex fixed four vulnerabilities last month, three of which can now be chained together in an exploit called "Plex2Shell" to achieve remote code execution. Attackers are actively exploiting these flaws to install cryptominers and residential proxy malware on vulnerable servers.
Background
Plex is a popular media streaming server used by millions worldwide, making any vulnerability chain with active exploitation a significant security concern. The disclosure of proof-of-concept exploit code has accelerated real-world attack activity.
- Source
- Ars Technica
- Published
- Oct 20, 2026 at 03:39 AM
- Score
- 8.0 / 10