Plex2Shell CVE-2026-96652: Unauthenticated RCE Active

Attackers began exploiting the Plex2Shell chain the day after Zach Main published the write-up and proof-of-concept on October 16, and a BoredHackerBlog honeypot caught an XMRig miner and a proxy prog