Plex2Shell exploitation pushes unpatched Plex servers into crypto mining
Hackers are using a public exploit chain called Plex2Shell against unpatched Plex Media Server systems and installing cryptocurrency miners and proxy software. According to SecurityWeek, the attacks began one day after the exploit code went public on October 16, 2026. How the Plex2Shell chain works Plex2Shell links four flaws, tracked as CVE-2026-96652, CVE-2026-96654, CVE-2026-96655 and CVE-2026-96656. Together, they let a remote user run code on a server without a password.…