🗓️ Join us August 20 for runZero Hour: Summer Camp recap! Register Now

Start Free Book Demo

Platform
- Overview
  Complete security visibility across IT, OT, IoT, cloud, mobile, and remote assets.
  
  Exposure Assessment
  
  Total Attack Surface Visibility
  
  Full-Spectrum Exposure Detection
  
  Risk Prioritization & Insights
  
  Compliance, Reporting, & KPIs
  
  Fast Deployment & Scalability
- Integrations
  runZero seamlessly integrates with a wide variety of tools, enhancing network visibility, enriching asset data, and uncovering control gaps.
- Community Edition
  Our completely free version of the runZero Platform is ideal for home use and environments with fewer than 100 assets.
Welcome to the New Era of Exposure Management

Check out our launch video to see how we're fixing what’s broken with vulnerability management & overcoming persistent problems.

Watch Now
Solutions
- Solutions
  Gain visibility, control the unknowns, and ensure compliance with confidence.
  
  Incident Response
  
  Unmanaged & Unknowns
  
  Vulnerability Management
  
  Mergers & Acquisitions
  
  Compliance & Insurance
- Regulatory Compliance
  Ensure compliance and stay resilient against evolving cyber threats.
  
  DORA
  
  NIST CSF & 800-171
  
  NIS2
  
  NYDFS
  
  PCI DSS
It’s Time To Move Away From Legacy Vulnerability Management

Legacy vulnerability scanners were built for a different time — when networks had clear perimeters, assets were reachable, and credential-based scanning was feasible across the board. That world doesn’t exist anymore.

Read More
Resources
- Resource Center
  Dive into a treasure trove of resources to expand your exposure management knowledge.
  
  Reports
  
  Webcasts
  
  Solution Briefs
- runZero Research
  Explore the world of exposure management through the runZero lens.
  
  Research Blogs
  
  Rapid Responses
  
  runZero Hour
- runZero Blog
  See what's happening at runZero and read up on the latest ideas, opinions, and articles from our experts and researchers.
  
  The New Era of Exposure Management
  
  Read About Our New Product Release
- Support Resources
  Everything you need to maximize your experience with the runZero Platform.
  
  Documentation
  
  REST API
  
  Open Source
  
  Changelog
Introducing EPSS Pulse: Follow EPSS trends to stay ahead of risk.

Our free new research tool, EPSS Pulse, monitors daily score changes so you can focus on the vulnerabilities that truly matter. Get the context you need to confidently prioritize the risks that pose the greatest threat to your environment.

Try EPSS Pulse
Customers
- Our Customers
  Our customers are everything. We're super proud to be trusted by leading organizations around the globe to help them improve their security.
- Case Studies
  See how runZero has empowered security teams to take control of their networks, uncover their unknowns, and save significant time and money.
  
  North Carolina K-12
  
  Topcon
  
  Capgemini
  
  Presidio
  
  York University
- Testimonials
  Read reviews of the runZero Platform and see how teams have improved their security with our technology.
runZero confirmed safe for OT environments by the U.S. Department of Energy

runZero’s active scanning methods improve visibility with no impact on the performance of ICS or ongoing supervisory control and data acquisition processes and communications.

Read the Report
Partners
- Infinity Partner Program
  See how we can work together to provide best-in-class security solutions and outcomes for our joint customers.
- Partner Directory
  Explore our directory of trusted (and awesome) partners.
- Partner Sign In
  Sign in to our Infinity Partner Portal.
Join our Infinity Partner Program

Designed with a partner-first mindset, the runZero Infinity Partner Program offers incredibly valuable resources, relationships, and rewards to partners who choose to grow their business with us.

Become a runZero Partner
About
- About Us
  Wondering who the heck are these people? Meet the team and get the story behind runZero... once upon a time called Rumble.
- Events
  Track down runZero Yetis in the wild! Join us in-person or virtually at one of our upcoming events.
- Investors
  Meet the cybersecurity investors, trailblazers, and innovators who help us navigate our journey and the evolving security landscape.
- Newsroom
  Read the latest articles, announcements, and press releases from runZero.
- Careers
  Want to join our forces? We're looking for bright minds and passionate souls who want to write the next chapter in exposure management.
Join us for runZero Hour: Hacker Summer Camp recap edition!

In this post-Hacker Summer Camp recap, Tod Beardsley, Rob King, HD Moore, and Matthew Kienow break down the most practical insights from BSidesLV, Black Hat and DEF CON. From tool debuts to emerging trends, this episode highlights what stood out and why it matters.

Register Now
Pricing
Support
Contact Us
Sign In

🗓️ Join us August 20 for runZero Hour: Summer Camp recap! Register Now

Overview
Complete security visibility across IT, OT, IoT, cloud, mobile, and remote assets.
Integrations
runZero seamlessly integrates with a wide variety of tools, enhancing network visibility, enriching asset data, and uncovering control gaps.
Community Edition
Our completely free version of the runZero Platform is ideal for home use and environments with fewer than 100 assets.

Welcome to the New Era of Exposure Management

Check out our launch video to see how we're fixing what’s broken with vulnerability management & overcoming persistent problems.

Watch Now

Solutions
Gain visibility, control the unknowns, and ensure compliance with confidence.
Regulatory Compliance
Ensure compliance and stay resilient against evolving cyber threats.
- DORA
- NIST CSF & 800-171
- NIS2
- NYDFS
- PCI DSS

It’s Time To Move Away From Legacy Vulnerability Management

Legacy vulnerability scanners were built for a different time — when networks had clear perimeters, assets were reachable, and credential-based scanning was feasible across the board. That world doesn’t exist anymore.

Resource Center
Dive into a treasure trove of resources to expand your exposure management knowledge.
runZero Research
Explore the world of exposure management through the runZero lens.
runZero Blog
See what's happening at runZero and read up on the latest ideas, opinions, and articles from our experts and researchers.
- The New Era of Exposure Management
- Read About Our New Product Release
Support Resources
Everything you need to maximize your experience with the runZero Platform.

Introducing EPSS Pulse: Follow EPSS trends to stay ahead of risk.

Our free new research tool, EPSS Pulse, monitors daily score changes so you can focus on the vulnerabilities that truly matter. Get the context you need to confidently prioritize the risks that pose the greatest threat to your environment.

Try EPSS Pulse

Our Customers
Our customers are everything. We're super proud to be trusted by leading organizations around the globe to help them improve their security.
Case Studies
See how runZero has empowered security teams to take control of their networks, uncover their unknowns, and save significant time and money.
Testimonials
Read reviews of the runZero Platform and see how teams have improved their security with our technology.

runZero confirmed safe for OT environments by the U.S. Department of Energy

runZero’s active scanning methods improve visibility with no impact on the performance of ICS or ongoing supervisory control and data acquisition processes and communications.

Read the Report

About Us
Wondering who the heck are these people? Meet the team and get the story behind runZero... once upon a time called Rumble.
Events
Track down runZero Yetis in the wild! Join us in-person or virtually at one of our upcoming events.
Investors
Meet the cybersecurity investors, trailblazers, and innovators who help us navigate our journey and the evolving security landscape.
Newsroom
Read the latest articles, announcements, and press releases from runZero.
Careers
Want to join our forces? We're looking for bright minds and passionate souls who want to write the next chapter in exposure management.

Join us for runZero Hour: Hacker Summer Camp recap edition!

In this post-Hacker Summer Camp recap, Tod Beardsley, Rob King, HD Moore, and Matthew Kienow break down the most practical insights from BSidesLV, Black Hat and DEF CON. From tool debuts to emerging trends, this episode highlights what stood out and why it matters.

Infinity Partner Program
See how we can work together to provide best-in-class security solutions and outcomes for our joint customers.
Partner Directory
Explore our directory of trusted (and awesome) partners.
Partner Sign In
Sign in to our Infinity Partner Portal.

Join our Infinity Partner Program

Designed with a partner-first mindset, the runZero Infinity Partner Program offers incredibly valuable resources, relationships, and rewards to partners who choose to grow their business with us.

Become a runZero Partner

On This Page:

Latest Plex Media Server vulnerability
What is the impact?
Are updates or workarounds available?
How to find potentially vulnerable systems with runZero

How to find Plex Media Server installations on your network

Matthew Kienow

Updated August 15, 2025, 4:59pm EDT

Latest Plex Media Server vulnerability #

Plex released a security update for a currently undisclosed vulnerability in certain versions of Plex Media Server. The flaw was reported to Plex through their bug bounty program.

The following versions are affected

Plex Media Server versions 1.41.7.x through 1.42.0.x

What is the impact? #

The impact of the vulnerability is currently unknown. However, Plex "strongly recommends" that users update to the latest version as quickly as possible.

Are updates or workarounds available? #

Users are encouraged to update to the latest version as quickly as possible:

Plex Media Server upgrade to version 1.42.1 or later

How to find potentially vulnerable systems with runZero #

From the Software Inventory, use the following query to locate potentially impacted assets:

vendor:=Plex AND product:="Media Server"

Written by Matthew Kienow

Matthew Kienow is a software engineer and security researcher. Matthew previously worked on the Recog recognition framework, AttackerKB as well as Metasploit's MSF 5 APIs. He has also designed, built, and successfully deployed many secure software solutions; however, often he enjoys breaking them instead. He has presented his research at various security conferences including DerbyCon, Hack In Paris, and CarolinaCon. His research has been cited by CSO, Threatpost and SC Magazine.

More about Matthew Kienow

Explore more

Watch Now • On Demand

Vulnerability management is broken: what's the fix?

HD Moore and Omdia analyst Rik Turner discuss why traditional vulnerability management is struggling in modern IT infrastructures, why CVEs don’t tell the full story, and why prioritization alone isn’t enough to close critical security gaps.

Watch Now