CVE-2026-96655

Plex Media Server versions prior to 1.43.3.10861 are vulnerable to a security flaw that allows authenticated users to exploit the '/video/:/transcode/universal' path to request arbitrary internal or external addresses. This could lead to unauthorized access to sensitive resources or services within the network. Organizations using affected versions should prioritize patching to mitigate potential risks associated with this vulnerability.