CVE-2026-96652: Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability
Summary
Plex Media Server has a server-side request forgery (SSRF) vulnerability that allows attackers to force the server to POST to an attacker-controlled destination by manipulating the 'protocol' parameter. This vulnerability can be combined with other CVEs.
IFF Assessment
This vulnerability allows attackers to control where the Plex server sends POST requests, which could lead to further compromise or data exfiltration.
Severity
CISA KEV: Listed as actively exploited. Federal patch due: November 03, 2026. Known ransomware use: Unknown.
Defender Context
This SSRF vulnerability in Plex Media Server requires defenders to prioritize patching or mitigation according to vendor instructions and CISA guidance. Attackers could leverage this flaw to pivot within networks or exfiltrate data by forcing the Plex server to communicate with malicious endpoints.