HoneyLabs
Lookup
Explore
CVEsEarly actorsPayloadsCampaignsEmissions IndexPortsUser-agentsUDP traffic
Integrations
OverviewMCPFeedsAPI / EnrichSplunkMicrosoft SentinelElasticMISPOpenCTICrowdSec
PricingDocsBlog

CVE-2026-96654: Plex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page Vulnerability

HoneyLabs honeypots recorded 1 probe matching CVE-2026-96654 from 1 distinct source IP address in the last 7 days, of which 1 on interactive sensors. Severity is rated medium.

This CVE is on CISA's Known Exploited Vulnerabilities list. CISA added it on 2026-10-20.

One source probed for CVE-2026-96654 on the interactive sensors and sent the exploit payload.

Addresses probing it

Source IPProbesNetworkCountry
94.154.43.71Storm Industries LLCThe Netherlands

Networks it comes from

ASNOrganisationProbesSource IPs
AS219502Storm Industries LLC11

Where it comes from

CountryProbes
The Netherlands1

Requests the interactive sensors answered

  • GET /player/timeline/subscribe

HTTP client fingerprints

  • b11cun119_00040010_18c0c79f_x04f40e7a4d805b1083f79d40aab3f12…

CVE report

CVE report

Open a specific CVE from the CVE tracker.