KNOWN EXPLOITED VULNERABILITY DOSSIER
CVE-2026-96656
Plex · Media Server
Plex Media Server contains an external control of file name or path vulnerability which can allow an admin user to write arbitrary files that may be executed on load. This vulnerability can be chained with CVE-2026-96652, CVE-2026-96654, and CVE-2026-96655.
Correlated Federal Court Cases & Indictments (0)
No specific federal indictment in our landmark database directly links to this CVE yet. This vulnerability is monitored under CISA's Known Exploited Vulnerabilities catalog.
Associated Government Advisories
Direct advisory cross-references are being continuously mapped from CISA and allied CERT publications.