CISA: Hackers chain Plex flaws in Plex2Shell attacks to breach servers

CISA has issued a warning regarding active exploitation of four vulnerabilities in Plex Media Server, collectively referred to as 'Plex2Shell' attacks. Attackers are chaining these flaws together to breach servers running Plex Media Server. The advisory highlights the risk of remote code execution or unauthorized access through the chained exploitation of these vulnerabilities. CISA is urging organizations and users running Plex Media Server to apply patches immediately. The campaign demonstrates the increasing trend of attackers combining multiple lower-severity vulnerabilities to achieve high-impact outcomes. This advisory underscores the importance of timely patching for media server software exposed to the internet.