QNAP says hackers breaching NAS devices in Plex2Shell attacks

QNAP says it has received multiple reports of customer NAS devices compromised through Plex2Shell, a chain of four Plex Media Server vulnerabilities that CISA added to its Known Exploited Vulnerabilities catalog in October. The company urges users to update Plex through the QNAP App Center, warns that internet-exposed vulnerable servers should be treated as compromised, and recommends a clean OS reinstall plus credential resets for affected devices, since updating alone will not remove payloads already installed.