QTS

Search everything

Mentions · 7d2
Mentions · 30d2
All mentions2
First seenNov 6, 2026
Last mentioned1h ago

Timeline

2 articles · newest first

QNAP says Plex2Shell flaws are used to compromise NAS devices

Users should move Plex Media Server to 1.43.3.10861 or later; exposed 1.43.2 installs may need a clean reinstall.

Security Affairs14:40 UTC · 1h agoExploit / PoCExploited4 sourcesCVE-2026-96652 CVE-2026-96654 CVE-2026-96655+1

QNAP NAS devices breached in Plex2Shell attacks

QNAP advises users to update Plex Media Server to 1.43.3.10861 after suspected compromises via a chain of four vulnerabilities.

BleepingComputerupdated 14:40 UTC · 1h agofirst Nov 6, 17:04 UTC · 2d agoVulnerabilityExploited4 sourcesCVE-2026-96652 CVE-2026-96654 CVE-2026-96655+11

Related CVEs

by mentions

CVE-2026-966562%8.6
Admin-Triggered Arbitrary File Write & RCE in Plex Media Server
published Sep 23, 2026Plex Media ServerKEV
CVE-2026-966542%6.9
Plex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page Vulnerability
published Sep 23, 2026Plex Media ServerKEV
CVE-2026-9665511%5.3
Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability
published Sep 23, 2026Plex Media ServerKEV
CVE-2026-9665212%5.3
Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability
published Sep 23, 2026Plex Media ServerKEVPoC

Appears with

QNAPvendor · 2
QuTS heroproduct · 2
CISAorganization · 2
Plex Media Serverproduct · 2
Plexvendor · 1

Entities are extracted by the model from each article. First seen Nov 6, 2026, last mentioned 1h ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.