Reported by 3 outlets

Timeline

1. original reporting

   Plex warns users to patch security vulnerabilities immediately

   bleepingcomputer.com · 40d ago · September 3rd, 2026

   Plex urged users this week to update their desktop clients and media servers immediately to patch multiple security vulnerabilities. These flaws have not yet been assigned CVE IDs for easy tracking, and while Plex didn't provide additional details on Tuesday , the security issues are known to affect Plex Media Server v1.43.2 and earlier. Plex also emailed users running affected versions and asked them to update as soon as possible to address these security flaws. "We recently released Plex Media Server 1.43.3 and Plex Desktop 1.115.0 to address a number of security issues. We recommend all server owners and Desktop users update to the latest version as soon as possible," the company said . "CVEs have been requested and we'll reply to this thread with more details once they're published. If you're running Plex Media Server on a NAS device, the updated version may not be available in their package manager yet but you can install the package manually." Those running affected versions are advised to secure their systems as soon as possible by updating Plex Media Server to version 1.43.3 (released on May 19 ) and the Plex Desktop client to 1.115.0 (released on August 13 ), which can be downloaded from the official downloads page or the server management page. Plex email ( Jedi-Master_Kenobi ) ​​Although Plex hasn't shared any details about these vulnerabilities so far, users should follow the company's advice and secure their systems before attackers reverse-engineer the patches a

2. update from cyberpress.org

   Plex Urges Users to Update Media Server as Multiple Security Flaws Are Discovered

   cyberpress.org · 39d ago · September 4th, 2026

   Plex has urged Media Server administrators and Plex Desktop users to install the latest available releases after discovering multiple security issues affecting its software. Plex did not disclose technical details about the affected components, vulnerability severity, exploitation conditions, or potential impact. However, the company confirmed that it has requested CVE identifiers and said it will publish additional information after the CVEs are assigned. The announcement should be treated as a security-driven update, particularly by users who operate remotely accessible Plex instances. Plex Media Server is commonly deployed on home servers, NAS appliances, desktops, Linux machines, and Docker containers . Depending on the configuration, an exposed server can provide remote streaming, account authentication, media library access, and administrative functions. Although Plex has not stated that the newly fixed flaws are being actively exploited, administrators should not wait for public vulnerability details before applying available patches. Windows and macOS users with automatic updates enabled should verify that their Plex Media Server deplo

3. update from gbhackers.com

   Plex Urges Users to Update Media Server as Multiple Security Flaws Are Discovered

   gbhackers.com · 39d ago · September 4th, 2026

   Plex has urged users to promptly update their Plex Media Server and Plex Desktop software following the release of fixes for several undisclosed security issues in older versions. The company advises that all server owners and desktop users upgrade to the latest release […] The post Plex Urges Users to Update Media Server as Multiple Security Flaws Are Discovered appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform .