Is your Plex server affected by Plex2Shell?
Plex2Shell chains four flaws in Plex Media Server (CVE-2026-96652, -96654, -96655, -96656) into a full takeover. Attackers are using it to plant cryptominers on servers older than 1.43.3.10861. Enter the address of your Plex server to see its version.
Plex only at home?
If you never watch from outside, the safest Plex is one the internet can't see. Turn off Remote Access in Plex, remove the port forwarding for 32400 on your router and check that UPnP isn't opening it again. Then update anyway.
Need more? Run it yourself.
This page checks one server at a time. The free command-line version does a lot more: whole IP ranges, a port scan, every website hosted on the same server, CSV export, and no limits. One Python file, nothing to install.
# download one file, run it curl -LO https://github.com/akaihigurashi/plex2scan/releases/latest/download/plex2scan.py python3 plex2scan.py 203.0.113.0/24 # only scan systems you're allowed to test