{"total":1,"items":[{"id":1738,"title":"CVE-2026-96656: Plex Media Server External Control of File Name or Path Vulnerability","original_title":"CVE-2026-96656: Plex Media Server External Control of File Name or Path Vulnerability","source_rating":null,"summary":"Plex Media Server contains an external control of file name or path vulnerability which can allow an admin user to write arbitrary files that may be executed on load. This vulnerability can be chained with CVE-2026-96652, CVE-2026-96654, and CVE-2026-96655.\n\nVereiste actie: Apply mitigations in accordance with vendor i","ai":false,"actions":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-96656","type":"kev","language":"en","published_at":"2026-10-20T00:00:00+00:00","severity":"hoog","priority":48,"vendors":["Plex"],"cves":[{"id":"CVE-2026-96656","cvss":8.6,"epss":0.00396,"epss_percentile":0.32349,"in_kev":true,"kev_ransomware":false}],"cve_count":1,"in_kev":true,"exploited_by":["CISA KEV","ENISA EUVD"],"kev_ransomware":false,"cvss_max":8.6,"epss_max":0.00396,"source_count":1,"ncsc":null,"source":{"slug":"cisa-kev","name":"CISA Known Exploited Vulnerabilities","category":"vulnerability","country":"US","license":"Publiek domein (US-overheid)","reuse":"open"},"bundle":null}]}