P
Vendor security profile1 actively exploited CVEs
Plex
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs10
Critical0
CISA KEV1
Public exploit5
Patch rate%0
Avg. CVSS5.9
12-month vulnerability rate
0
0
4
0
0
0
0
0
0
0
5
0
CVE KEV
CVE severity distribution
10toplam CVE
High3 (30%)
Medium6 (60%)
Uncertain1 (10%)
Patch and exploitation view
%0
Verified patch
%10
CISA KEV
%50
Public exploit
0Patch available
0Partial
1Workaround
0Vendor: no patch
9Unknown
Latest vulnerabilities
8.6
CVE-2026-96656
Plex Media Server arbitrary file write
P
Patch status unknownEPSS %0
4.3
CVE-2026-96655
Plex Media Server arbitrary-host SSRF
P
Patch status unknownEPSS %0
6.9
CVE-2026-96654
Plex Media Server URL injection
P
Patch status unknownEPSS %0
4.3
CVE-2026-96652
Plex Media Server SSRF
P
Patch status unknownEPSS %0
6.5
CVE-2026-96651
Plex Media Server path traversal
P
Patch status unknownEPSS %1
5.5
CVE-2026-88055
AnythingLLM: Stored XSS Due to Unescaped Server-Side HTML Concatenation in MetaGenerator
M
Patch status unknownEPSS %0
5.9
CVE-2026-72917
AnythingLLM: Password recovery accepts one recovery code twice after whitespace normalization
M
Patch status unknownEPSS %0
8.8
CVE-2026-48116
Command injection in Mintplexlabs Anythingllm
M
Patch verifiedEPSS %1
4.3
CVE-2026-47713
Vulnerability in Mintplexlabs Anythingllm
M
Patch verifiedEPSS %0
2.5
CVE-2026-45403
Vulnerability in Mintplexlabs Anythingllm
M
Patch verifiedEPSS %0