SSRF on a media server: the cloud instance case

SSRF on a media server: the cloud instance case A media server in a living room and the same software in a cloud virtual machine are not the same risk. CVE-2026-96655, the authenticated server-side request forgery in Plex Media Server, is a good example of why deployment context changes the answer. The flaw lets an authenticated user supply a path parameter to /video/:/transcode/universal that…