CVE-2020-5741
Plex Media Server
Plex Media Server Remote Code Execution Vulnerability
What it is
Plex Media Server contains a remote code execution vulnerability that allows an attacker with access to the server administrator's Plex account to upload a malicious file via the Camera Upload feature and have the media server execute it.
What to do
Apply updates per vendor instructions.
Vendor notices and references
Description and required action as published by CISA. Full record at NVD.
Other Plex entries on the list
- Media Server Plex Media Server External Control of File Name or Path Vulnerability CVE-2026-96656 · Oct 20, 2026
- Media Server Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability CVE-2026-96655 · Oct 20, 2026
- Media Server Plex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page Vulnerability CVE-2026-96654 · Oct 20, 2026
- Media Server Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability CVE-2026-96652 · Oct 20, 2026