CISA: Hackers chain Plex flaws in Plex2Shell attacks to breach servers
-
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning that attackers are actively exploiting four vulnerabilities in Plex Media Server. The flaws are being chained together in attacks tracked as Plex2Shell, allowing adversaries to breach vulnerable servers.
CISA's alert confirms active exploitation in the wild, meaning unpatched Plex Media Server instances are at risk. Since the flaws are used in combination rather than in isolation, a single missing patch may not be enough to keep a server protected.
Administrators running Plex Media Server should take the following steps:
- Apply the latest security updates for Plex Media Server as soon as possible to address all four vulnerabilities
- Audit internet-facing Plex installations and restrict unnecessary exposure to the public internet
- Review server logs for signs of unexpected or suspicious activity
Given that the flaws are chained, patch coverage across all four issues matters — partial remediation leaves a path open.
Source: BleepingComputer
Has anyone confirmed whether their Plex deployment is fully patched against all four flaws, and how are you handling external exposure?
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login