QNAP Warns Plex Users of Active Plex2Shell Exploitation on NAS Devices
QNAP has issued an urgent advisory to users running Plex Media Server on their NAS systems regarding a set of four vulnerabilities collectively known as Plex2Shell. The flaws allow unauthenticated remote attackers to take full control of vulnerable Plex instances. Plex has confirmed that the vulnerabilities are being actively exploited on a large scale following the public release of proof-of-concept code on 16 October. Compromised servers are being infected with cryptominers and proxy software that enables further malicious activity from the affected systems. QNAP recommends immediate installation of Plex version 1.43.3.10861 or newer through the App Center and advises additional hardening steps for internet-exposed deployments.
Security.NLNov 6, 2026Translated from NL