CVE Monitor
CVE-2025-69416
MEDIUM
02 Jan 2026
In the plex.tv backend for Plex Media Server (PMS) through 2025-12-31, a non-server device token can retrieve other tokens (intended for unrelated access) via clients.plex.tv/devices.xml.
CVE-2025-69415
HIGH
02 Jan 2026
In Plex Media Server (PMS) through 1.42.2.10156, ability to access /myplex/account with a device token is not properly aligned with whether the device is currently associated with an account.
CVE-2025-34798
N/A
02 Jan 2026
CVE-2025-34797
N/A
02 Jan 2026
CVE-2025-34796
N/A
02 Jan 2026
CVE-2025-34795
N/A
02 Jan 2026
CVE-2025-34794
N/A
02 Jan 2026
CVE-2025-34793
N/A
02 Jan 2026
CVE-2025-34792
N/A
02 Jan 2026
CVE-2025-34791
N/A
02 Jan 2026
CVE-2025-34790
N/A
02 Jan 2026
CVE-2025-34789
N/A
02 Jan 2026
CVE-2025-34788
N/A
02 Jan 2026
CVE-2025-34787
N/A
02 Jan 2026
CVE-2025-34786
N/A
02 Jan 2026
CVE-2025-34785
N/A
02 Jan 2026
CVE-2025-34784
N/A
02 Jan 2026
CVE-2025-34783
N/A
02 Jan 2026
CVE-2025-34782
N/A
02 Jan 2026
CVE-2025-34781
N/A
02 Jan 2026
CVE-2025-34780
N/A
02 Jan 2026
CVE-2025-34779
N/A
02 Jan 2026
CVE-2025-34778
N/A
02 Jan 2026
CVE-2025-34777
N/A
02 Jan 2026
CVE-2025-34776
N/A
02 Jan 2026
Page 62 of 633