QNAP warns of Plex2Shell attacks exploiting Plex Media Server on NAS devices

# QNAP warns of Plex2Shell attacks exploiting Plex Media Server on NAS devices

https://gcdradar.vercel.app/incidents/qnap-warns-of-plex2shell-attacks-exploiting-plex-media-serve · AIR-2026-1816 · live

- Lane: Patch now
- Severity: 3 (Confirmed exploitation): Confirmed exploitation in the wild against QNAP NAS devices.
- Fix status: No patch yet
- First reported: 2026-11-06
- AI role: No AI role
- Products: QNAP NAS, Plex Media Server

## Summary

Hackers are actively exploiting a vulnerability chain dubbed Plex2Shell to compromise QNAP network-attached storage devices. QNAP has urged users to update their Plex Media Server installations immediately.

## What to do

Update Plex Media Server to the latest version available in the QNAP App Center.

## Affected and fixed versions

- Affected: Plex Media Server

## Latest updates

- 2026-11-06: QNAP says hackers breaching NAS devices in Plex2Shell attacks (https://bleepingcomputer.com/news/security/qnap-says-hackers-breaching-nas-devices-in-plex2shell-attacks)

## Sources

- 2026-11-06 BleepingComputer: QNAP says hackers breaching NAS devices in Plex2Shell attacks https://bleepingcomputer.com/news/security/qnap-says-hackers-breaching-nas-devices-in-plex2shell-attacks
- 2026-11-09 SecurityWeek: Plex2Shell Exploited Against QNAP NAS Users https://securityweek.com/plex2shell-exploited-against-qnap-nas-users

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.