CVE-2026-96655 1

CVE-2026-96655: Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability

Known Exploited Vulnerabilities CISA KEV Catalog Oct 20, 2026

Plex Media Server contains a server-side request forgery (SSRF) vulnerability that could allow an authenticated user to request arbitrary internal or external addresses via the '/video/:/transcode/universal' path parameter. This vulnerability can be...

Vulnerabilities & Patching