CISA Warns of Plex Servers Exploitation

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning stating that malicious actors are actively exploiting four vulnerabilities in Plex Media Server.

According to security reports, attackers are chaining these flaws together in what are being called Plex2Shell attacks to successfully breach target servers.

CISA has added these security issues to its Known Exploited Vulnerabilities catalog, mandating federal agencies in the U.S. to mitigate the risks within specific timeframes.

This campaign highlights the persistent threat landscape where attackers leverage multiple software weaknesses to bypass standard security controls.

Server administrators and IT professionals are strongly advised to apply the latest security patches and keep their media server software up to date to prevent potential compromises.