(cyberunit.com) Plex2Shell Exploit Chain: Critical Vulnerabilities in Plex Media Server Enable Unauthenticated Remote Code Execution In brief - This article discusses the 'Plex2Shell' exploit chain affecting Plex Media Server and warns businesses about the risk of corporate breaches originating from compromised home networks of remote employees. Technically - This article details a critical exploit chain (CVSS 9.8) consisting of four vulnerabilities: CVE-2026-96652 (SSRF in the player timeline endpoint), CVE-2026-96654 (unauthorized access to internal plugin APIs via the SSRF), CVE-2026-96655 (admin token theft), and CVE-2026-96656 (arbitrary file write to the Plex Codecs directory). This chain allows an unauthenticated attacker to achieve remote code execution (RCE) by loading a malicious shared library during transcoding, typically targeting port 32400 to deploy cryptocurrency miners and residential proxies. Source: https://cyberunit.com/insights/plex2shell-vulnerability-home-media-servers-business-risk/ #Cybersecurity