Is CVE-2026-96655 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-96655?

CVE-2026-96655 has a CVSS v3 severity of MEDIUM (4.3).

Back

CVE-2026-96655

Description

Plex Media Server before 1.43.3.10861 allows an authenticated user to request arbitrary internal or external addresses via the '/video/:/transcode/universal' path parameter.