Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability

概要

参考情報

• forums.plex.tv/t/plex-media-server/30447/711 · Release Notes
• raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2026/va-26-266-01.json · Third Party Advisory
• cve.org/CVERecord · Third Party Advisory
• zmain.info/blog/plex2shell · Third Party Advisory
• cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
• CISA KEV · CVE-2026-96655

media server のその他の脆弱性

• CVE-2026-96656高 7.2悪用確認済み（CISA KEV）Plex Media Server before 1.43.3.10861 allows an admin user to write arbitrary files that may be executed on load. The preference TranscoderH…
• CVE-2026-96654中 6.5悪用確認済み（CISA KEV）Plex Media Server before 1.43.3.10861 does not correctly neutralize URL values included in 'searchOne,' allowing an attacker to call other p…
• CVE-2026-96652中 4.3悪用確認済み（CISA KEV）Plex Media Server before 1.43.3.10861 allows SSRF via '/player/timeline'. An attacker using any X-Plex-Token value can include a full URL in…
• CVE-2026-96651中 6.5Plex Media Server before 1.43.3.10861 builds a file path from the url parameter without checking it for ../ sequences, allowing path travers…
• CVE-2025-69417中 4.3In the plex.tv backend for Plex Media Server (PMS) through 2025-12-31, a non-server device token can retrieve share tokens (intended for unr…