Cryptomining

vulnerabilities 2026-10-20
Plex2Shell: Four-CVE Plex Media Server Chain Exploited Within a Day of PoC Release, Dropping XMRig and Proxy Malware
A public exploit chain for Plex Media Server (CVE-2026-96652, -96654, -96655, -96656) goes from SSRF to code execution; attackers began dropping XMRig and a proxy tool less than 24 hours after the PoC appeared.
active-exploitation rce ssrf linux cryptomining container

Plex2Shell: Four-CVE Plex Media Server Chain Exploited Within a Day of PoC Release, Dropping XMRig and Proxy Malware