Hackers Exploit Plex2Shell Flaws to Install Crypto Miners and Linux Proxy Backdoor
Hackers Exploit Plex2Shell Flaws to Install Crypto Miners and Linux Proxy Backdoor
19 October 2026
Threat actors have begun to exploit a chain of vulnerabilities in Plex Media Server to deploy cryptocurrency miners and reverse proxy software, a day after a proof-of-concept (PoC) went public.
According to a researcher who goes by the online alias boredhackerblog, the exploitation activity involves chaining four different vulnerabilities, collectively called Plex2Shell.
The vulnerabilities