CVE-2026-96656 — Plex Media Server external control of file name or path vulnerability

The CISA Known Exploited Vulnerabilities (KEV) Catalog includes CVE-2026-96656, affecting Plex Media Server and involving external control of a file name or path. CISA describes the KEV Catalog as the authoritative source for vulnerabilities exploited in the wild.