CVE Watch—

CVE-2020-5741

Plex Media Server Remote Code Execution Vulnerability

CVSS

—

Sem CVSS

EPSS

72.9%

p99

KEV

SIM

10 de mar. de 2023

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

72.8%EPSS · 30 dias72.9%

2026-10-082026-11-05

Ficha do catálogo KEV

Produto

Plex / Media Server

Vulnerabilidade

Plex Media Server Remote Code Execution Vulnerability

Adicionado ao KEV

10 de mar. de 2023

Corrigir até

31 de mar. de 2023

Uso conhecido em ransomware

Não

Descrição resumida

Plex Media Server contains a remote code execution vulnerability that allows an attacker with access to the server administrator's Plex account to upload a malicious file via the Camera Upload feature and have the media server execute it.

Ação necessária

Apply updates per vendor instructions.

Notas

https://forums.plex.tv/t/security-regarding-cve-2020-5741/586819; https://nvd.nist.gov/vuln/detail/CVE-2020-5741

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2026-966567.2 ALT

78.4%

KEV—74Plex Media Server External Control of File Name or Path Vulnerability16d CVE-2026-966554.3 MÉD

95.8%

KEV—79Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability16d CVE-2026-966546.5 MÉD

80.3%

KEV—74Plex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page Vulnerability16d CVE-2026-966524.3 MÉD

96.1%

KEV—79Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability16d