A one-file, read-only script (plex-check.sh) you can run on any server to check
whether a Plex Media Server install shows signs of compromise via the
Plex2Shell exploit chain and the malware dropped by it in the wild.
In October 2026, a chain of four Plex Media Server bugs was published with a working PoC (CVE-2026-96652, -96654, -96655, -96656). Chained together, they allow **unauthenticated