On September 1, Plex, a popular media server software provider, issued a security advisory urging users to update their software. The advisory did not specify the nature of the vulnerability, the systems affected, or the potential risk level. Additionally, no official Common Vulnerabilities and Exposures (CVE) identifier has been assigned to the issue, which is typically used to catalog known security flaws. As a result, the public has limited information about the potential threat. The advisory instructed users of Plex Media Server to upgrade to version 1.43.3 or later, while desktop users were advised to update to version 1.115.0. This means that all versions prior to 1.43.3 are potentially affected. However, the advisory provided no further details on the specific security issues, how they could be exploited, or the severity of the risk. Plex stated that it had requested CVE identifiers and promised to release more information in the future, but as of now, no details have been publicly shared. In the absence of clear information, the Shadowserver Foundation, a global network of security researchers, took action. They scanned the internet for unpatched Plex servers and found over 36,000 exposed servers, with 16,000 of them located in the United States. While the exact nature of the vulnerability remains unclear, the presence of so many exposed servers raises concerns about potential exploitation by cybercriminals. Without knowing the full scope of the vulnerability, users are advised to check whether their servers are accessible from the internet. If remote access is enabled or if a router port is forwarded, their server may be among those identified by Shadowserver. To address the issue, users should immediately update their Plex Media Server to the latest version. For Windows, macOS, and Linux users, the latest version is available on Plex’s official download page. For those using Docker, instructions can be found in Plex’s repository README. If the server is running on a network-attached storage (NAS) device, users should manually update through the NAS interface, as the update may not be available automatically through the manufacturer’s app store. The importance of timely updates is underscored by past incidents, such as a 2022 breach where attackers accessed a company's encrypted customer data through an unpatched Plex server used by an employee.