PSA: Patch your Plex media server before someone hacks it

Recently fixed vulnerabilities in the Plex Media Server are under active exploitation in attacks that, when successful, install malware, including cryptominers and residential proxy apps, a researcher said. Plex fixed four vulnerabilities at the start of last month. Three weeks later, published CVE designations revealed five vulnerabilities, with one of them carrying a severity rating of 8.6 out of 10.

Published 19-Oct-2026 23:23 UTC · First seen 19-Oct-2026 23:22 UTC

Sources

• Ars Technica Security · 19-Oct-2026