companyPlex
suspectedlowVulnerabilityFirst reported Oct 19, 2026
Plex: Media Server flaws exploited in the wild to deploy cryptominers
A researcher recorded successful attacks against a honeypot on October 17, 2026, in which attackers exploited Plex Media Server vulnerabilities to install cryptocurrency mining malware. The activity follows the public release of Plex2Shell, an exploit chaining four vulnerabilities for unauthenticated code execution. Proxy software was also observed running alongside the miner.
Members only
The full record: the timeline and 1 linked report
- Every update as it happened, with the status at each step
- Every report behind the record, newest first
- Alerts the moment Plex — or anything else you track — is hit again
A free account is all it takes — no card, one minute.