Vulnerability Details CVE-2026-96655
Plex Media Server before 1.43.3.10861 allows an authenticated user to request arbitrary internal or external addresses via the '/video/:/transcode/universal' path parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 8.8%
CVSS Severity
CVSS v3 Score 4.3