https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 13:01:14 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-374224 EUVD-2026-374224 https://cve.radiocsirt.org/vuln/euvd-2026-374224 https://cve.radiocsirt.org/vuln/fkie_cve-2026-96655 <p>Plex Media Server before 1.43.3.10861 allows an authenticated user to request arbitrary internal or external addresses via the &#39;/video/:/transcode/universal&#39; path parameter.</p> <p>Plex Media Server before 1.43.3.10861 allows an authenticated user to request arbitrary internal or external addresses via the &#39;/video/:/transcode/universal&#39; path parameter.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-96655 https://cve.radiocsirt.org/vuln/ghsa-9x88-w2p7-56vh <p>Plex Media Server before 1.43.3.10861 allows an authenticated user to request arbitrary internal or external addresses via the &#39;/video/:/transcode/universal&#39; path parameter.</p> <p>Plex Media Server before 1.43.3.10861 allows an authenticated user to request arbitrary internal or external addresses via the &#39;/video/:/transcode/universal&#39; path parameter.</p> https://cve.radiocsirt.org/vuln/ghsa-9x88-w2p7-56vh https://cve.radiocsirt.org/vuln/va-26-266-01 <p>Plex Media Server before 1.43.3.10861 builds a file path from the url parameter without checking it for ../ sequences, allowing path traversal via &#39;/system/agents/media/get&#39;. A remote attacker with a valid session token could read any file that the target user can access. This access includes the PlexOnlineToken, which grants control of the Plex account and server. A LAN-adjacent attacker with a client-supplied X-Forwarded-For header could exploit the same issue. Plex Media Server before 1.43.3.10861 allows SSRF via &#39;/player/timeline&#39;. An attacker using any X-Plex-Token value can include a full URL in the &#39;protocol&#39; parameter and force the Plex server to POST to the attacker&#39;s chosen destination. Plex Media Server before 1.43.3.10861 does not correctly neutralize URL values included in &#39;searchOne,&#39; allowing an attacker to call other plugins&#39; functions and supply their own parameters. Plex Media Server before 1.43.3.10861 allows an authenticated user to request arbitrary internal or external addresses via the &#39;/video/:/transcode/universal&#39; path parameter. Plex Media Server before 1.43.3.10861 allows an admin user to write arbitrary files that may be executed on load. The preference TranscoderH264Options is appended verbatim to x264&#39;s option string on every transcode. At startup, all .so files are run without signature, execute bit, or symbol checks.</p> <p>Plex Media Server before 1.43.3.10861 builds a file path from the url parameter without checking it for ../ sequences, allowing path traversal via &#39;/system/agents/media/get&#39;. A remote attacker with a valid session token could read any file that the target user can access. This access includes the PlexOnlineToken, which grants control of the Plex account and server. A LAN-adjacent attacker with a client-supplied X-Forwarded-For header could exploit the same issue. Plex Media Server before 1.43.3.10861 allows SSRF via &#39;/player/timeline&#39;. An attacker using any X-Plex-Token value can include a full URL in the &#39;protocol&#39; parameter and force the Plex server to POST to the attacker&#39;s chosen destination. Plex Media Server before 1.43.3.10861 does not correctly neutralize URL values included in &#39;searchOne,&#39; allowing an attacker to call other plugins&#39; functions and supply their own parameters. Plex Media Server before 1.43.3.10861 allows an authenticated user to request arbitrary internal or external addresses via the &#39;/video/:/transcode/universal&#39; path parameter. Plex Media Server before 1.43.3.10861 allows an admin user to write arbitrary files that may be executed on load. The preference TranscoderH264Options is appended verbatim to x264&#39;s option string on every transcode. At startup, all .so files are run without signature, execute bit, or symbol checks.</p> https://cve.radiocsirt.org/vuln/va-26-266-01