CVE-2026-96656

HIGH 7.2

Plex Media Server arbitrary file write

CVSS Score

7.2

EPSS Score

0.0%

EPSS Percentile

0th

Plex Media Server before 1.43.3.10861 allows an admin user to write arbitrary files that may be executed on load. The preference TranscoderH264Options is appended verbatim to x264's option string on every transcode. At startup, all .so files are run without signature, execute bit, or symbol checks.

CWE	CWE-73
Vendor	plex
Product	media server
Published	Sep 23, 2026
Last Updated	Sep 23, 2026

Stay Ahead of the Next One

Get instant alerts for plex media server

Be the first to know when new high vulnerabilities affecting plex media server are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Affected Versions

Plex / Media Server

0 < 1.43.3.10861

References

NVD ↗ CVE.org ↗ EPSS Data ↗

forums.plex.tv: https://forums.plex.tv/t/plex-media-server/30447/711 cve.org: https://www.cve.org/CVERecord?id=CVE-2026-96656 raw.githubusercontent.com: https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2026/va-26-266-01.json zmain.info: https://zmain.info/blog/plex2shell

Credits

Zach Main