CVE-2026-96652 – InfoSecNexus

Critical vulnerability warning above a compromised server core

CVE-2026-96652: Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability

Plex Media Server contains a server-side request forgery (SSRF) vulnerability which could allow an attacker using any X-Plex-Token value to include a full URL in the 'protocol' parameter...

21/10/2026 3 min read

Read briefing

Critical CVEs Cyber Security

CVE-2026-96656: Plex Media Server External Control of File Name or Path Vulnerability

Plex Media Server contains an external control of file name or path vulnerability which can allow an admin user to write arbitrary files that may be executed on...

21/10/2026 2 min read

Read briefing

Cyber Security

Live Cybersecurity Brief for October 21, 2026: Active Threats, CVEs, and Vendor Advisories

Current cybersecurity intelligence for October 21, 2026, led by CVE-2026-96652: Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability and CVE-2026-106931: EG Secure Solutions SiteGuard Server Edition OS Command...

Updated 21/10/2026 10 min read

Read briefing