CISA: Hackers chain Plex flaws in Plex2Shell attacks to breach servers

CISA warns that attackers are actively exploiting four vulnerabilities in Plex Media Server, collectively called Plex2Shell. When chained, the flaws can allow an attacker to obtain the owner’s admin token and execute code with elevated privileges.