Plex2Shell Exploit Chain Weaponized Against Plex Servers Hours After Disclosure

vulnerability

Plex2Shell Exploit Chain Weaponized Against Plex Servers Hours After Disclosure

Threat actors are actively exploiting a chain of four Plex Media Server vulnerabilities (CVE-2026-96652, CVE-2026-96654, CVE-2026-96655 and CVE-2026-96656) to deploy cryptocurrency miners and proxy software.

SecurityWeek · 10h ago HighCVSS 7.2Exploited

CVE-2026-96652 CVE-2026-96654 CVE-2026-96655 plex vulnerability exploit

vulnerability

Hackers Exploit Plex2Shell Flaws to Install Crypto Miners and Linux Proxy Backdoor

Hackers are exploiting a chain of vulnerabilities, dubbed Plex2Shell, in Plex Media Server to install cryptocurrency miners and a Linux backdoor. Users are strongly advised to update their Plex installations immediately.

The Hacker News · 6h ago HighCVSS 7.2Exploited

CVE-2026-96652 CVE-2026-96654 CVE-2026-96655 plex vulnerability linux

news.mlab.sh

Plex2Shell Exploit Chain Weaponized Against Plex Servers Hours After Disclosure

Plex2Shell Exploit Chain Weaponized Against Plex Servers Hours After Disclosure

Hackers Exploit Plex2Shell Flaws to Install Crypto Miners and Linux Proxy Backdoor