CVE-2026-96656 — Plex Media Server arbitrary file write
Plex Media Server before 1.43.3.10861 allows an admin user to write arbitrary files that may be executed on load. The preference TranscoderH264Options is appended verbatim to x2…
Published: 2026-09-23 · CVSS: 8.6 · CVSS 4.0
Plex Media Server before 1.43.3.10861 allows an admin user to write arbitrary files that may be executed on load. The preference TranscoderH264Options is appended verbatim to x264's option string on every transcode. At startup, all .so files are run without signature, execute bit, or symbol checks.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7