CVE-2026-96655 | Plex Media Server up to 1.42.1 Transcode transcode server-side request forgery

September 23, 2026 Yanac

A vulnerability was found in Plex Media Server 0.9.9.2/0.9.9.2.374/0.9.9.3/0.9.9.10/1.42.1 and classified as problematic. The impacted element is an unknown function of the component Transcode. Executing a manipulation of the argument transcode can lead to server-side request forgery.

This vulnerability is tracked as CVE-2026-96655. The attack can be launched remotely. No exploit exists.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More