{"schema":"vulnpedia.poc/1","cve":"CVE-2026-96656","generated":"2026-10-26T13:52:32.101Z","kev":{"since":"2026-10-20","ransomware":false},"epss":{"score":0.01785,"percentile":0.78151},"cvss":{"version":"4.0","score":8.6,"severity":"HIGH","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},"has_public_poc":true,"poc_sources":[{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/81db309969f5","executable":false,"sourceId":"81db309969f5","verification":"catalogued","source":"vulncheck-kev","modified":"2026-10-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"81db309969f5","modified":"2026-10-18T00:00:00Z","url":"https://vulncheck.com/xdb/81db309969f5"}],"repositoryUrl":"https://github.com/gmh5225/plex2shell"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/88e7f1215926","executable":false,"sourceId":"88e7f1215926","verification":"catalogued","source":"vulncheck-kev","modified":"2026-10-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"88e7f1215926","modified":"2026-10-18T00:00:00Z","url":"https://vulncheck.com/xdb/88e7f1215926"}],"repositoryUrl":"https://github.com/code-zm/plex2shell"}],"detection_sources":[],"discovery_links":[{"kind":"github-search","url":"https://github.com/search?q=%22CVE-2026-96656%22&type=repositories","executable":false}],"poc_candidates":[{"url":"https://github.com/a3igner/plex-codec-cache-implant","source":"poc-in-github","sourceId":"CVE-2026-96656","description":"Incident write-up: unsigned .so in the Plex Media Server codec cache executes a dropper on every transcode (CVE-2026-96656) — IOCs, STIX, YARA","modified":"2026-10-18T10:12:10Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-96656","url":"https://github.com/a3igner/plex-codec-cache-implant"},{"source":"poc-in-github","sourceId":"CVE-2026-96656","modified":"2026-10-18T10:12:10Z","url":"https://github.com/a3igner/plex-codec-cache-implant"}],"tags":[]}],"test_commands":[{"tool":"poc.json","cmd":"curl -s https://vulnpedia.com/cve/CVE-2026-96656/poc.json","note":"Machine-readable PoC index for this CVE (for automation)."}]}