GoKawiilQNAP confirms NAS compromises via Plex2Shell vulnerability chain
QNAP has confirmed that attackers are exploiting a chain of four Plex Media Server vulnerabilities, dubbed Plex2Shell, to compromise customers' NAS devices. The company says its technical support team is assisting affected users and is urging everyone to update Plex Media Server to version 1.43.3.10861 via the QNAP App Center. QNAP clarified that the flaws affect only Plex Media Server, not its QTS, QuTS hero, or other NAS operating systems.
GoKawiil's interpretation of the reporting above, not reported fact.
The vulnerabilities, publicly detailed on October 16, were exploited quickly enough that CISA added all four to its Known Exploited Vulnerabilities catalog within days, reflecting how rapidly attackers can weaponize disclosed flaws in widely used consumer storage software. Because NAS devices often hold personal backups and media libraries, successful exploitation could expose sensitive files to attackers, making prompt patching important for affected users.
- Plex2Shell is a chain of four CVEs in Plex Media Server actively exploited since mid-October 2026.
- CISA mandated federal agencies patch within three days, marking it a top-priority threat.
- QNAP confirms only Plex Media Server is affected, not its core NAS operating systems like QTS or QuTS hero.
QNAP TS-464 NAS Enclosure — If you're running Plex Media Server on a QNAP NAS, staying current on hardware and firmware matters as much as patching software against threats like Plex2Shell. The TS-464 supports the latest QNAP QTS updates and app center tools, making it easier to keep your media server secure and up to date. A modern NAS also gives you better control over network segmentation and access policies to limit exposure from vulnerable services.
See QNAP TS-464 NAS Enclosure on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: bleepingcomputer.com, 2026-11-06
Published there as: “QNAP says hackers breaching NAS devices in Plex2Shell attacks”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.