# SZB-25aea6b559: QNAP says hackers are exploiting Plex2Shell vulnerability chain on NAS devices

QNAP says hackers are exploiting the Plex2Shell vulnerability chain, as reported by BleepingComputer. QNAP urges users to update Plex Media Server to the latest version available in the QNAP App Center.

- Type: Early warning
- Kind: Vulnerability
- Vendor: QNAP
- Product: Plex Media Server
- Status: Reported, not confirmed
- Sources: 1 distinct
- First seen: 2026-11-06 17:06 UTC

> No statement or filing from QNAP has reached cve.now yet. Every claim below is quoted from, and linked to, the source that made it.

Written by a model from the sources below. Verify against them.

## What to do

- Update Plex Media Server to the latest version from the QNAP App Center
- Review QNAP's security advisory for indicators of compromise
- Check NAS devices for unexpected accounts, processes, or changes

## Timeline

- 2026-11-06 17:04 UTC: Made public by BleepingComputer
- 2026-11-06 17:06 UTC: First seen by cve.now

## Evidence (1 source)

- 2026-11-06 · Press · [BleepingComputer](https://www.bleepingcomputer.com/news/security/qnap-says-hackers-breaching-nas-devices-in-plex2shell-attacks/): “QNAP urges users to update Plex Media Server to the latest version available in the QNAP App Center, as hackers are exploiting the Plex2Shell vulnerability chain.” (+1 more: [BleepingComputer on Bluesky](https://bsky.app/profile/bleepingcomputer.com/post/3mznuhyp5272k))

## Corrections

None so far.

Something wrong on this page? Report an error: https://github.com/sazabi/cve.now/issues/new?title=Wrong%20fact%20on%20SZB-25aea6b559&body=https%3A%2F%2Fcve.now%2FSZB-25aea6b559%0A%0AWhat%20is%20wrong%2C%20and%20the%20source%20that%20shows%20it%3A%0A

## Questions about SZB-25aea6b559

### Has QNAP confirmed it?

BleepingComputer reports it. No statement from QNAP has reached cve.now yet.

Source: https://www.bleepingcomputer.com/news/security/qnap-says-hackers-breaching-nas-devices-in-plex2shell-attacks/

### What should QNAP users do?

Update Plex Media Server to the latest version from the QNAP App Center. Review QNAP's security advisory for indicators of compromise. Check NAS devices for unexpected accounts, processes, or changes.

## Related

- Browse: [Early warnings](https://cve.now/early-warnings.md)

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/SZB-25aea6b559
Site guide for agents: https://cve.now/llms.txt