36,000 Plex Servers Are Exposed—Is Yours One of Them?

Robert Moore · 2026-09-09

### The Unpatched Plex Problem: What You Need to Know If you run a Plex Media Server, you might want to sit down for this. Over 36,000 Plex servers are sitting exposed online, unpatched and wide open to attackers. That's not a typo—thirty-six thousand. These servers are vulnerable to multiple security flaws that have already been fixed, but their owners haven't updated yet. Think of it like leaving your front door unlocked in a neighborhood where break-ins are happening. The lock works fine—you just haven't turned it. That's the situation for thousands of Plex users right now. ### Why This Matters More Than You Think Plex is awesome. It lets you stream your movie collection, music, and photos from anywhere. But when you expose your server to the internet, you're also exposing it to everyone else—including bad actors. The vulnerabilities in question aren't new. Patches exist. But many people set up Plex once and forget about it. Life gets busy. Updates get ignored. And that's exactly what attackers count on. - **Remote code execution:** Some flaws could let an attacker run malicious code on your server. - **Data exposure:** Your media library, user data, and even connected devices could be at risk. - **Botnet recruitment:** Compromised servers are often added to botnets for larger attacks. > "The internet is a rough neighborhood. You wouldn't leave your car running with the keys in it—don't do the same with your server." ### How to Check If You're Vulnerable First, don't panic. Just check. Log into your Plex server and look for update notifications. If you haven't updated in a while, there's a good chance you're running an outdated version. - Go to Settings > General and check your version. - Compare it to the latest release on Plex's official site (but don't click any links from emails—go directly). - Enable automatic updates if you haven't already. ### The Fix Is Simple (But You Have to Do It) Updating Plex takes minutes. Seriously. Most people spend more time deciding what to watch than updating their server. But that five-minute task could save you from a major headache. If you're not comfortable exposing your server to the internet, consider using a VPN or setting up remote access through a secure tunnel. It's a bit more work upfront but way safer in the long run. ### Don't Be a Statistic 36,000 servers is a lot. But it's also a reminder that we're all part of a bigger ecosystem. When one server gets compromised, it can be used to attack others. So updating isn't just about you—it's about keeping the whole community safer. So, do yourself a favor. Check your Plex server today. Update it. Then get back to watching your favorite shows with peace of mind.