Summary

Threat actors are exploiting the four-flaw chain to hack the Plex Media Server application on QNAP NAS devices. The post Plex2Shell Exploited Against QNAP NAS Users appeared first on SecurityWeek .

For more information, read the full story at the original source: SecurityWeek ↗

Vulnerabilities in this story

• CVE-2026-96656 KEV · fix by 2026-10-23 Plex Media Server EPSS 1.7% 8.6High
• CVE-2026-96654 KEV · fix by 2026-10-23 Plex Media Server EPSS 1.9% 6.9Medium
• CVE-2026-96652 KEV · fix by 2026-11-03 Plex Media Server EPSS 11.8% 5.3Medium
• CVE-2026-96655 KEV · fix by 2026-11-03 Plex Media Server EPSS 10.7% 5.3Medium

Also reported by

• Security Affairs: QNAP Warns Users as Plex2Shell Flaws Are Used to Hack NAS Devices ↗