Plex Media Server exploited-in-the-wild SSRF/URI/file-write chain (KEV)

CISA added four chained Plex Media Server CVEs to the Known Exploited Vulnerabilities catalog on 2026-10-20 with confirmed in-the-wild exploitation: CVE-2026-96652 (SSRF via any X-Plex-Token letting an attacker force a POST to a chosen destination), CVE-2026-96654 (improper neutralization of encoded URI schemes allowing calls to other plugins' functions with attacker-supplied parameters), CVE-2026-96655 (SSRF via the /video/:/transcode/universal path parameter) and CVE-2026-96656 (external control of file name/path letting an admin write files that may execute on load).

This is a KEV-confirmed in-the-wild chain on a widely deployed self-hosted server. It is not an AI-specific target, but it is surfaced because KEV status denotes active exploitation and the chain (SSRF + file write + plugin invocation) is the same lateral-movement primitive attackers now drive with AI-assisted tooling. For any org running Plex on a reachable host, patch now.

Unauthenticated/authenticated requests forcing server-side requests and file writes on the Plex host

Plex Media Server v1.43.2 and earlier (chain: CVE-2026-96652/96654/96655/96656)

Upgrade Plex Media Server per the vendor forum update; apply CISA BOD 26-04 mitigations and forensics guidance