Plex Urges Immediate Updates After Patching Multiple Undisclosed Security Flaws
Summary: Plex released Plex Media Server 1.43.3 and Plex Desktop 1.115.0 to patch multiple security flaws it did not describe, and said CVE identifiers have been requested for them. Plex recommended all server owners and Desktop users update as soon as possible, noting that NAS users may need to install the package manually if their package manager does not yet carry it.
Why it matters: Censys data cited in the article counts more than 360,000 devices exposing the Plex Media Server web interface, and a Plex Media Server vulnerability (CVE-2020-5741) was the entry point for the 2022 LastPass breach, where attackers implanted keylogger malware on an employee's home computer.
Read the original at The Hacker News ↗
- Topics
- Data Breaches
- Mentions
- CVE-2020-5741CVE-2025-34158
- Related
- CVE-2020-5741: Plex Media Server Remote Code Execution Vulnerability Known Exploited Vulnerabilities · Mar 10, 2023TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026