Hackers Exploit Plex2Shell Flaws to Install Crypto Miners and Linux Proxy Backdoor - The Hacker News

Automated excerpt

Threat actors have begun to exploit a chain of vulnerabilities in Plex Media Server to deploy cryptocurrency miners and reverse proxy software, a day after a proof-of-concept (PoC) went public. Put differently, the vulnerabilities can be combined together in this order to achieve unauthenticated remote code execution on susceptible Plex Media Server instances. The vulnerabilities, along with CVE-2026-96651 (CVSS score: 7. 1), were disclosed to Plex on July 27, 2026, by security researcher Zach Main, and were patched in Plex Media Server 1. 43. 3. 10861 released on August 3, 2026.

Selected automatically from source text; not independently written or fact-checked. Read the original for full context.