What happened
On October 20, the U.S. Cybersecurity and Infrastructure Security Agency added six issues to its Known Exploited Vulnerabilities catalog. Four affect Plex Media Server: CVE-2026-96652, CVE-2026-96654, CVE-2026-96655, and CVE-2026-96656. Reporting by BleepingComputer says the flaws can be chained and affect versions before 1.43.3.10861. The CISA bulletin is grounded in evidence of exploitation, not only a proof-of-concept attack.
Why it matters
Home media servers are easy to overlook during routine updates because they can run quietly for months. A remotely accessible server may also sit near other devices and personal files. The general lesson is that connected appliances and background services deserve the same patching attention as a laptop or phone, particularly when a trusted exploitation catalog highlights an issue.
What to watch next
If you operate Plex, check the installed server version against the vendor’s current advisory and update to a fixed release. Review remote access settings, minimize unnecessary exposure, and investigate suspicious access if your server may have been vulnerable. For organizational systems, follow the vendor’s guidance and applicable CISA requirements.