CVE-2025-34158

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

September 3, 2026

Last Seen

October 19, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Plex2Shell Exploit Chain Actively Targeting Vulnerable Plex Servers72.9

A chain of vulnerabilities in Plex Media Server, termed Plex2Shell, is being by attackers to gain unauthorized access and deploy cryptocurrency miners and proxy software. The vulnerabilities, tracked as CVE-2026-96652, CVE-2026-96654, CVE-2026-96655, and CVE-2026-96656, allow unauthenticated remote...

Plex Urges Immediate Updates to Address Critical Security Vulnerabilities60.8

Plex has issued an urgent call for users to update their desktop clients and media servers to patch multiple undisclosed security vulnerabilities affecting Plex Media Server v1.43.2 and earlier. The latest versions, Plex Media Server 1.43.3 and Plex Desktop 1.115.0, have been released to address the...