Summary
generated automatically from NVD dataPlex Media Server before 1.43.3.10861 lets an admin user write arbitrary files, because the TranscoderH264Options preference is appended verbatim to x264's option string on every transcode. Since all .so files are loaded at startup without signature, execute bit, or symbol checks, a written file can be executed on load (CWE-73). The flaw is rated CVSS 7.2 (HIGH) and is listed in the CISA KEV catalog, which indicates active exploitation.
NVD description
Plex Media Server before 1.43.3.10861 allows an admin user to write arbitrary files that may be executed on load. The preference TranscoderH264Options is appended verbatim to x264's option string on every transcode. At startup, all .so files are run without signature, execute bit, or symbol checks.
⚠️ Actively exploited — CISA KEV
This CVE was added to CISA's Known Exploited Vulnerabilities catalog on 2026-10-20. It is confirmed exploited in the wild and must be patched as a priority.
Remediation deadline (US federal agencies): 2026-10-23
EPSS · FIRST.org
0.40%probability of exploitation in the next 30 days
Higher than 32% of scored CVEs
EPSS (Exploit Prediction Scoring System) estimates, from observed exploitation activity, how likely a CVE is to be exploited in the next 30 days. It complements CVSS, which measures severity, not likelihood. Score of 2026-10-20, recomputed daily by FIRST.org.
In-depth analysis on cveo.tech
We've published a detailed analysis of this CVE — exploitation, IOCs and mitigation.
CVSS v3.1 Score
Information
- Published
- 23 sept. 2026
- Updated
- 21 oct. 2026
- Status
- Modified
- Source
- 9119a7d8-5eab-497f-8521-727c672e3725
Affected products
Weaknesses (CWE)
References (6)
- https://forums.plex.tv/t/plex-media-server/30447/711Release Notes
- https://www.cve.org/CVERecord?id=CVE-2026-96656Third Party AdvisoryVDB Entry
- https://zmain.info/blog/plex2shellThird Party Advisory
Similar CVEs
Other vulnerabilities of type CWE-73
Monitor your products
Get automatic alerts for every new CVE affecting your equipment.