GoKawiilQNAP confirms NAS compromises via Plex2Shell vulnerability chain
QNAP has confirmed that attackers are exploiting a chain of four Plex Media Server vulnerabilities, dubbed Plex2Shell, to compromise customers' NAS devices. The company says its technical support team is assisting affected users and is urging everyone to update Plex Media Server to version 1.43.3.10861 via the QNAP App Center. QNAP clarified that the flaws affect only Plex Media Server, not its QTS, QuTS hero, or other NAS operating systems.