CVE-2026-96656
CRITICAL CISACVSS Score
N/A
Severity
CRITICAL
Source
CISA
Published
Oct 20, 2026
Description
Plex โ Media Server: Plex Media Server contains an external control of file name or path vulnerability which can allow an admin user to write arbitrary files that may be executed on load. This vulnerability can be chained with CVE-2026-96652, CVE-2026-96654, and CVE-2026-96655.