QNAP says hackers breaching NAS devices in Plex2Shell attacks

QNAP has issued an urgent warning to users to update Plex Media Server to the latest version available through the QNAP App Center. Threat actors are actively exploiting a vulnerability chain known as Plex2Shell to breach QNAP NAS devices. The attack leverages weaknesses within Plex Media Server running on QNAP systems to gain unauthorized access. QNAP has advised all users running Plex Media Server on their NAS devices to apply the latest security updates immediately. The campaign represents an active exploitation effort targeting network-attached storage devices, which often contain sensitive data. Users who fail to update may remain exposed to remote compromise of their NAS systems.