Vulnerabilidades do Plex Media Server
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Plex Media Server: 5 registro(s), com versões afetadas e correções.cpe:2.3:a:plex:media_server
CVE-2025-69417
Média · 4.3
CWE-863 02/01/2026
Incorrect Authorization em Plex Media Server
In the plex.tv backend for Plex Media Server (PMS) through 2025-12-31, a non-server device token can retrieve share tokens (intended for unrelated access) via a shared_servers endpoint.
CVE-2025-69416
Média · 4.3
CWE-863 02/01/2026
Incorrect Authorization em Plex Media Server
In the plex.tv backend for Plex Media Server (PMS) through 2025-12-31, a non-server device token can retrieve other tokens (intended for unrelated access) via clients.plex.tv/devices.xml.
CVE-2025-69415
Alta · 7.1
CWE-672 02/01/2026
In Plex Media Server (PMS) through 1.42.2.10156, ability to access /myplex/account with…
In Plex Media Server (PMS) through 1.42.2.10156, ability to access /myplex/account with a device token is not properly aligned with whether the device is currently associated with an account.
CVE-2025-69414
Alta · 7.1
CWE-863 02/01/2026
Incorrect Authorization em Plex Media Server
Plex Media Server (PMS) through 1.42.2.10156 allows retrieval of a permanent access token via a /myplex/account call with a transient access token.
CVE-2020-5741
Alta · 7.2
KEV Alta · 68 Exploit público CWE-502 08/05/2020
Plex Media Server Remote Code Execution Vulnerability
Deserialization of Untrusted Data in Plex Media Server on Windows allows a remote, authenticated attacker to execute arbitrary Python code.