Critical Plex Media Server Vulnerabilities Under Active Exploitation
A security researcher has flagged an active exploitation campaign targeting unpatched instances of Plex Media Server. The attacks reportedly leverage a chain of four vulnerabilities to gain access to vulnerable systems, ultimately deploying malware.
Plex has already released patches addressing these security flaws. Users running Plex Media Server are strongly advised to update to the latest available version immediately to protect against these attacks. Given that media servers often run with elevated privileges and may store or access sensitive personal data, keeping the software up to date is an important security practice.
This campaign underscores the importance of prompt patching, especially for services exposed to networks or the internet. Attackers increasingly target known vulnerabilities in popular software to build automated exploitation tools, making timely updates a critical line of defense.