Loading vulnerability…
CVE-2026-96655 is an authenticated server-side request forgery vulnerability in Plex Media Server versions before 1.43.3.10861. An authenticated user can manipulate the universal video transcoding endpoint's path parameter to cause the server to request arbitrary internal or external addresses. The vulnerability can expose services reachable from the Plex server and is one component of the Plex2Shell exploit chain, which combines four vulnerabilities to achieve unauthenticated code execution.
Mallory correlates every CVE against your assets, your vendors, and active adversary campaigns. Know which vulnerabilities matter for you, not just which ones are loud.
What it means. What to do now. Patch path, mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
If you can’t patch tonight, do this now.
Patch, then assume compromise.
1 valid exploit after Mallory filtered fakes, detection scripts, and README-only repos.
This standalone repository contains five files: a GPLv3 LICENSE, a README describing the chain and usage, the Python controller plex2shell.py, and Linux/Windows C payload templates. It is an exploitation tool rather than a detection script, with no evident fake-exploit behavior in the supplied code. The documented chain begins with unauthenticated SSRF through /player/timeline, pivots into a loopback agent endpoint, and uses identifier injection plus a networking prefix-confusion flaw to obtain an owner token. It then uses authenticated transcoding to fetch attacker-controlled lossless media. A dump-yuv transcoder setting reportedly writes the media's library-bearing first-frame luma into a codec directory. A second transcode loads the planted library and executes its constructor or DllMain. These vulnerabilities and CVE assignments are repository claims, not independently verified findings. The visible Python delivery code starts an operator-side media listener, supplies item.xml to run_transcode, changes TranscoderH264Options through /:/prefs, performs a delivery transcode, clears the option, and performs another transcode before waiting up to 45 seconds for a callback. It supports interactive and one-shot command modes and attempts to clear the transcoder option again during final cleanup. This clears the setting rather than visibly restoring any previous value; complete payload-file cleanup cannot be assessed. The Linux payload uses x86-64 Linux syscalls to fork and execute a substituted shell command. The Windows DLL starts a detached rundll32 process, connects to a configurable TCP address, and executes commands through hidden cmd.exe processes while returning output. Execution is at the service's existing privilege level, with no demonstrated host escape for Docker deployments. Important limitations: the central section of plex2shell.py is truncated, including the token-theft implementation, payload/carrier construction, argument parsing, and several helper functions. End-to-end correctness, exact generated paths, callback defaults, and complete network behavior therefore cannot be established from this material. No repository URL, git reference, or archive size was provided; empty strings and zero represent unavailable metadata.
Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.
Vendor-confirmed product mapping. Mallory continuously reconciles this list against your asset inventory.
8 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
One of four Plex Media Server vulnerabilities chained by the public Plex2Shell exploit to achieve unauthenticated code execution. The chain was successfully exploited against a Linux Docker honeypot to deploy cryptocurrency-mining software, including XMRig. The article does not identify this CVE's individual technical mechanism. The repository identifies versions before 1.43.3.10828 as vulnerable and 1.43.3.10861 as fixed.
An authenticated server-side request forgery vulnerability in Plex Media Server before version 1.43.3.10861 that permits requests to arbitrary internal or external addresses through the transcoding universal path parameter.
Query your assets running an affected version, and investigate the blast radius.
Every observed campaign linking this CVE to a named adversary.
Malware families riding this exploit, with evidence and IOCs.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Cross-references every affected SKU, including bundled OEM variants.
Community discussion across Reddit, Mastodon, and other social sources.