mylovelyminer

Mentions · 7d0
Mentions · 30d1
All mentions1
First seenOct 19, 2026
Last mentioned11d ago

Timeline

1 articles · newest first

Attackers exploit Plex2Shell flaws to install miners and a proxy

Four chained bugs give unauthenticated remote code execution; Plex fixed them in 1.43.3.10861 on August 3.

The Hacker NewsOct 19, 17:32 UTC · 11d agoExploit / PoCExploitedCVE-2026-96652 CVE-2026-96654 CVE-2026-96655+27 · 3 reads

Related CVEs

by mentions

CVE-2026-966562%8.6
Admin-Triggered Arbitrary File Write & RCE in Plex Media Server
published Sep 23, 2026Plex Media ServerKEV
CVE-2026-966542%6.9
Plex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page Vulnerability
published Sep 23, 2026Plex Media ServerKEV
CVE-2026-966552%5.3
Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability
published Sep 23, 2026Plex Media ServerKEV
CVE-2026-966522%5.3
Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability
published Sep 23, 2026Plex Media ServerKEVPoC
CVE-2026-966517.1
Authenticated Path Traversal in Plex Media Server Exposes PlexOnlineToken
published Sep 23, 2026Plex Media Server

Appears with

XMRigmalware · 1
Plexvendor · 1
Plex Media Serverproduct · 1
myawesomeproxymalware · 1

Entities are extracted by the model from each article. First seen Oct 19, 2026, last mentioned 11d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.