MS
Product
Media Server
by Plex · last CVE Sep 23, 2026
On CISA KEVExploited in the wild
19
CVEs
5
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 9Medium 7Low 0
Watch

Add Media Server to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2018-13415
9.8
31%
Aug 13
In Plex Media Server 1.13.2.5154, the XML parsing engine for SSDP/UPnP functionality is vulnerable to an XML External Entity Processing (XXE) attack
Affected: 1.13.2.5154
Showing 1