CVE-2026-96651 | Plex Media Server up to 1.42.1 /system/agents/media/get url path traversal

SecurityVulns
Yanac

A vulnerability classified as critical was found in Plex Media Server 0.9.9.2/0.9.9.2.374/0.9.9.3/0.9.9.10/1.42.1. This vulnerability affects unknown code of the file /system/agents/media/get. The manipulation of the argument url results in path traversal.

This vulnerability was named CVE-2026-96651. The attack may be performed from remote. There is no available exploit.

Upgrading the affected component is advised.VulDB Recent EntriesRead More