Plex Known Exploited Vulnerabilities

Evidence-backed KEV intelligence for Plex products — CISA KEV status, confidence, sensor telemetry, and virtual-patch availability.

Total KEVs

1

In CISA KEV

1

Beyond CISA KEV

0

Sensor Observed

0

Virtual Patch Available

0

Plex KEVs Added by Year

Loading...

1 Plex KEV added all time (primary attestation date).

Attested CVEs

CVE Confidence CISA KEV Added
CVE-2020-5741

Deserialization of Untrusted Data in Plex Media Server on Windows allows a remote, authenticated attacker to execute arbitrary Python code.

Confirmed In CISA 10 Mar 2023

Common Vulnerability Classes (CWE)

  • CWE-502 — Deserialization of Untrusted Data 1

Browse all known exploited vulnerabilities · What is a known exploited vulnerability? · Methodology