{"schema":"vulnpedia.poc/1","cve":"CVE-2026-96652","generated":"2026-10-26T13:52:32.101Z","kev":{"since":"2026-10-20","ransomware":false},"epss":{"score":0.01821,"percentile":0.78606},"cvss":{"version":"4.0","score":5.3,"severity":"MEDIUM","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N"},"has_public_poc":true,"poc_sources":[{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/a744d859fbf1","executable":false,"sourceId":"a744d859fbf1","verification":"catalogued","source":"vulncheck-kev","modified":"2026-10-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"a744d859fbf1","modified":"2026-10-18T00:00:00Z","url":"https://vulncheck.com/xdb/a744d859fbf1"}],"repositoryUrl":"https://github.com/gmh5225/plex2shell"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/564fa8759764","executable":false,"sourceId":"564fa8759764","verification":"catalogued","source":"vulncheck-kev","modified":"2026-10-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"564fa8759764","modified":"2026-10-18T00:00:00Z","url":"https://vulncheck.com/xdb/564fa8759764"}],"repositoryUrl":"https://github.com/code-zm/plex2shell"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/e5488e213079","executable":false,"sourceId":"e5488e213079","verification":"catalogued","source":"vulncheck-kev","modified":"2026-10-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"e5488e213079","modified":"2026-10-18T00:00:00Z","url":"https://vulncheck.com/xdb/e5488e213079"}],"repositoryUrl":"https://github.com/basesixtythree/B63-POC-CVE-2026-96652"}],"detection_sources":[],"discovery_links":[{"kind":"github-search","url":"https://github.com/search?q=%22CVE-2026-96652%22&type=repositories","executable":false}],"poc_candidates":[{"url":"https://github.com/gmh5225/plex2shell","source":"poc-in-github","sourceId":"CVE-2026-96652","description":"CVE-2026-96652 CVE-2026-96654 CVE-2026-96655 CVE-2026-96656","modified":"2026-10-17T01:44:36Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-96652","url":"https://github.com/gmh5225/plex2shell"},{"source":"poc-in-github","sourceId":"CVE-2026-96652","modified":"2026-10-17T01:44:36Z","url":"https://github.com/gmh5225/plex2shell"}],"tags":[]},{"url":"https://github.com/code-zm/plex2shell","source":"poc-in-github","sourceId":"CVE-2026-96652","description":"CVE-2026-96652 CVE-2026-96654 CVE-2026-96655 CVE-2026-96656","modified":"2026-10-25T18:04:24Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-96652","url":"https://github.com/code-zm/plex2shell"},{"source":"poc-in-github","sourceId":"CVE-2026-96652","modified":"2026-10-25T18:04:24Z","url":"https://github.com/code-zm/plex2shell"}],"tags":[]},{"url":"https://github.com/ChrisLPJones/plex2shell-check","source":"poc-in-github","sourceId":"CVE-2026-96652","description":"Read-only Linux check for Plex2Shell (CVE-2026-96652/-96654/-96655/-96656) exploitation and the XMRig/proxy payloads seen in the wild","modified":"2026-10-25T01:57:48Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-96652","url":"https://github.com/ChrisLPJones/plex2shell-check"},{"source":"poc-in-github","sourceId":"CVE-2026-96652","modified":"2026-10-25T01:57:48Z","url":"https://github.com/ChrisLPJones/plex2shell-check"}],"tags":[]},{"url":"https://github.com/w116tjb/plex2shell-windows-hunt","source":"poc-in-github","sourceId":"CVE-2026-96652","description":"Plex2Shell (CVE-2026-96652/54/55/56) IOC/IOA dossier and read-only Windows hunt script","modified":"2026-10-21T15:25:50Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-96652","url":"https://github.com/w116tjb/plex2shell-windows-hunt"},{"source":"poc-in-github","sourceId":"CVE-2026-96652","modified":"2026-10-21T15:25:50Z","url":"https://github.com/w116tjb/plex2shell-windows-hunt"}],"tags":[]},{"url":"https://github.com/basesixtythree/B63-POC-CVE-2026-96652","source":"poc-in-github","sourceId":"CVE-2026-96652","description":"PoC and verification material for CVE-2026-96652 (Plex Media Server timeline SSRF, owner-token disclosure chain)","modified":"2026-10-22T14:17:06Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-96652","url":"https://github.com/basesixtythree/B63-POC-CVE-2026-96652"},{"source":"poc-in-github","sourceId":"CVE-2026-96652","modified":"2026-10-22T14:17:06Z","url":"https://github.com/basesixtythree/B63-POC-CVE-2026-96652"}],"tags":[]},{"url":"https://github.com/TheGlitchFixer/plex2shell-check","source":"poc-in-github","sourceId":"CVE-2026-96652","description":"Quick Plex2Shell (CVE-2026-96652) exposure & version check — is your Plex Media Server patched (1.43.3.10861+)?","modified":"2026-10-24T03:15:12Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-96652","url":"https://github.com/TheGlitchFixer/plex2shell-check"},{"source":"poc-in-github","sourceId":"CVE-2026-96652","modified":"2026-10-24T03:15:12Z","url":"https://github.com/TheGlitchFixer/plex2shell-check"}],"tags":[]}],"test_commands":[{"tool":"poc.json","cmd":"curl -s https://vulnpedia.com/cve/CVE-2026-96652/poc.json","note":"Machine-readable PoC index for this CVE (for automation)."}]}