https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T19:02:48.009273+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-32230 EUVD-2026-32230 2026-10-03T19:02:48.080070+00:00 EUVD-2026-32230 https://cve.radiocsirt.org/vuln/fkie_cve-2021-42835 fkie_cve-2021-42835 2026-10-03T19:02:48.080106+00:00

An issue was discovered in Plex Media Server through 1.24.4.5081-e362dc1ee. An attacker (with a foothold in a endpoint via a low-privileged user account) can access the exposed RPC service of the update service component. This RPC functionality allows the attacker to interact with the RPC functionality and execute code from a path of his choice (local, or remote via SMB) because of a TOCTOU race condition. This code execution is in the context of the Plex update service (which runs as SYSTEM).

 https://cve.radiocsirt.org/vuln/ghsa-724p-rm8h-wjx7 GHSA-724p-rm8h-wjx7 2026-10-03T19:02:48.080140+00:00

An issue was discovered in Plex Media Server through 1.24.4.5081-e362dc1ee. An attacker (with a foothold in a endpoint via a low-privileged user account) can access the exposed RPC service of the update service component. This RPC functionality allows the attacker to interact with the RPC functionality and execute code from a path of his choice (local, or remote via SMB) because of a TOCTOU race condition. This code execution is in the context of the Plex update service (which runs as SYSTEM).

 https://cve.radiocsirt.org/vuln/gsd-2021-42835 gsd-2021-42835 2026-10-03T19:02:48.080159+00:00 gsd-2021-42835