#Plex
All CosmicBytez Labs articles tagged #Plex, across news, security advisories, how-to guides, and projects.
- News
CISA: Hackers Chain Plex Flaws in Plex2Shell Attacks to Breach Servers
CISA warns four Plex Media Server flaws, chained as Plex2Shell, are exploited in the wild. Update to 1.43.3.10861 or later; the federal deadline is October 23.
- News
Hackers Exploit Plex2Shell Flaws to Install Crypto Miners and Linux Proxy Backdoor
Attackers chained four Plex2Shell CVEs to gain RCE on exposed Plex servers, deploying an XMRig miner and a Linux proxy backdoor within a day of PoC release.
- Security
CVE-2026-96652: Plex Media Server SSRF Exploited in the Wild as Part of Plex2Shell RCE Chain
CISA added a Plex Media Server SSRF to KEV. It is step one of the Plex2Shell chain, already used to drop miners and proxies. Update to 1.43.3.10861.
- Security
CVE-2026-108264: Wizarr Jinja2 Template Injection Leads to RCE
Unsandboxed Jinja2 rendering of Wizarr wizard steps lets authenticated users or malicious bundle imports achieve remote code execution.
- Project
Homelab Media Server with Full ARR Stack
Deploy a complete self-hosted media automation system with Plex, Sonarr, Radarr, Prowlarr, and more. Includes Traefik reverse proxy, Authentik SSO, and...