QNAP says hackers are exploiting Plex2Shell vulnerability chain on NAS devices
QNAP says hackers are exploiting the Plex2Shell vulnerability chain, as reported by BleepingComputer. QNAP urges users to update Plex Media Server to the latest version available in the QNAP App Center.
Written by a model from the sources below. Verify against them.
- Kind
- Vulnerability
- Vendor
- QNAP
- Product
- Plex Media Server
- Status
- Reported, not confirmed
- First seen
What to do
Update Plex Media Server to the latest version from the QNAP App Center
Review QNAP's security advisory for indicators of compromise
Check NAS devices for unexpected accounts, processes, or changes
Timeline
- Made public by BleepingComputer
- First seen by cve.now
Evidence 1
- PressBleepingComputer
“QNAP urges users to update Plex Media Server to the latest version available in the QNAP App Center, as hackers are exploiting the Plex2Shell vulnerability chain.”
+1 more: BleepingComputer on Bluesky
Corrections
None so far.
Something wrong on this page? Report an error. Every fix is listed here.
Questions about SZB-25aea6b559
Has QNAP confirmed it?
BleepingComputer reports it. No statement from QNAP has reached cve.now yet.Source: BleepingComputer
What should QNAP users do?
Update Plex Media Server to the latest version from the QNAP App Center. Review QNAP's security advisory for indicators of compromise. Check NAS devices for unexpected accounts, processes, or changes.