Over 36,000 exposed Plex servers vulnerable to recent flaws

Over 36,000 internet-exposed Plex Media Server instances remain unpatched against multiple vulnerabilities affecting v1.43.2 and earlier; Plex released Server 1.43.3 and Desktop 1.115.0 to address the issues but CVEs are not yet published, limiting visibility for defenders. Shadowserver's daily scans found the exposed systems and the report warns administrators to update immediately to avoid attackers reverse-engineering patches and developing exploits; the article also cites historical Plex vulnerabilities and a prior data breach as context.