Plex2Shell QNAP NAS Attacks: Patching Is Not Enough

Plex2Shell QNAP NAS attacks: Plex Media Server flaws CVE-2026-96652 to CVE-2026-96656, fixed version 1.43.3.10861, November 2026

The Plex2Shell QNAP NAS attacks are real enough that QNAP has issued its own advisory: users report compromised devices, and updating Plex does not remove what attackers already installed. Plex 1.43.3.10861 fixes the flaws, but a NAS that ran Plex 1.43.2 or older while reachable from the internet needs more than an update. What Happened…

Read More