Exploited vulnerabilities tracker
CISA's catalog of vulnerabilities confirmed as exploited in the wild: 1769 entries, 35 added in the last 30 days, latest on Nov 6, 2026.
5 matching
| Added | CVE | Vendor / product | Vulnerability | Severity | Exploit odds | Due |
|---|---|---|---|---|---|---|
| Oct 20, 2026 | CVE-2026-96656 | Plex · Media Server | Plex Media Server External Control of File Name or Path Vulnerability | High 7.2 | 1.8% | Oct 23, 2026 |
| Oct 20, 2026 | CVE-2026-96655 | Plex · Media Server | Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability | Medium 4.3 | 10.7% | Nov 3, 2026 |
| Oct 20, 2026 | CVE-2026-96654 | Plex · Media Server | Plex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page Vulnerability | Medium 6.5 | 1.9% | Oct 23, 2026 |
| Oct 20, 2026 | CVE-2026-96652 | Plex · Media Server | Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability | Medium 4.3 | 11.9% | Nov 3, 2026 |
| Mar 10, 2023 | CVE-2020-5741 | Plex · Media Server | Plex Media Server Remote Code Execution Vulnerability | High 7.2 | 72.9% | Mar 31, 2023 |