22 October 2026
Reference: CVE-2026-96654
1. What is being reported?
The Plex Media Server software has a flaw where it does not properly check certain web address inputs. This flaw lets attackers call other plugins within the software and supply their own commands, potentially causing unexpected behaviour or security problems.
2. What this means in plain English
If your organisation uses Plex Media Server, attackers could exploit this weakness to interfere with your system or access information they should not. This could lead to disruptions or data risks. The problem is serious enough that government security agencies have listed it as actively exploited.
3. Could this affect a small business?
Small organisations using Plex Media Server, especially if it is accessible over the internet, could be affected. Those not using this software or who keep it isolated from external access are less likely to be impacted.
4. What to do now
- Check if you are running Plex Media Server and identify the version.
- Apply any updates or patches provided by Plex to fix this vulnerability.
- If updates are not yet available, follow any mitigation steps recommended by Plex or consider disabling the service until fixed.
- Ask your IT provider to review your setup to ensure the server is not unnecessarily exposed to the internet.
5. Ask your IT provider
Can you confirm if our Plex Media Server is updated to address CVE-2026-96654, and what steps have been taken to reduce exposure to this vulnerability?
6. Bottom line
Keep your Plex Media Server updated and protected to prevent attackers from exploiting this known security flaw.
Information based on CISA KEV, NVD and reputable security reporting.