Over 36,000 Exposed Plex Media Servers Vulnerable to Unpatched Flaws

A new analysis reveals that over 36,000 Plex Media Server instances are currently exposed online and running unpatched software, leaving them vulnerable to recently disclosed security flaws. The findings, reported by BleepingComputer, indicate that these internet-facing servers have not been updated following the disclosure of vulnerabilities, creating a persistent attack surface. While the exact nature of the vulnerabilities was not specified in the initial summary, the presence of unpatched known flaws on exposed instances raises concerns for unauthorized access, data exposure, and potential use as a pivot point into broader networks. Plex Media Server administrators are urged to apply available patches and review security configurations to reduce risk. The full scope of risk, including any observed exploitation in the wild, depends on the specific vulnerabilities involved and is subject to ongoing assessment.