CVE-2026-96652 — Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability

The CISA Known Exploited Vulnerabilities (KEV) Catalog includes CVE-2026-96652, affecting Plex Media Server and involving server-side request forgery (SSRF). CISA describes the KEV Catalog as the authoritative source for vulnerabilities that have been exploited in the wild.