QNAP warns of hackers breaching NAS devices via Plex2Shell

Tier A · Patch today – Before you go home

Who’s exposed: QNAP NAS devices running Plex Media Server

Tier A because: Core infrastructure or popular tool AND exploited in the wild

Reach

Attack

Damage

Fix

Popular tool · Exploited in the wild

What to do

The Brief

QNAP warns that hackers are breaching NAS devices through the Plex2Shell vulnerability chain.
QNAP urges users to update Plex Media Server to the latest version available in the QNAP App Center.

Owners of QNAP NAS devices running Plex Media Server are being actively targeted and should update Plex Media Server now.

Checklist · 3 of 10 yes

Yes	Hits tech teams	Judgment: QNAP NAS devices are network storage appliances that IT teams run and maintain.
No	Core infrastructure	Judgment: a QNAP NAS and Plex Media Server are not software nearly every team runs.
Yes	Popular tool	Judgment: QNAP NAS appliances and Plex Media Server are widely deployed products.
Yes	Exploited in the wild	BleepingComputer: QNAP says hackers are breaching NAS devices via the Plex2Shell chain.
No	Public exploit	BleepingComputer: no source says exploit code or a proof-of-concept is published.
No	Remote, no login	BleepingComputer: no source says the attack needs no credentials or user interaction.
No	Full takeover	BleepingComputer: sources only say hackers breach devices; code execution or admin access is not stated.
No	Secrets exposed	BleepingComputer: no source says credentials, configs or user data were stolen or exposed.
No	Supply chain	BleepingComputer: the sources describe exploitation of a vulnerability chain, not compromised packages or updates.
No	No fix yet	BleepingComputer: QNAP urges updating Plex Media Server to the latest version available in App Center.

Nov 6
QNAP warns that hackers are breaching NAS devices in Plex2Shell attacks
Nov 6 · 5:04 PM
BleepingComputer
QNAP says hackers breaching NAS devices in Plex2Shell attacks

First seen 2h ago · 1 source · Full story page · How tiers are decided