Osegi
Security·1 min read

Qnap NAS: Plex Media Server Update Closes Actively Exploited Flaws

Attackers are exploiting the Plex2Shell vulnerabilities in Plex Media Server. A patched version is now also available for Qnap NAS devices.

A Qnap NAS device on a desk running Plex Media Server, with a security warning symbol on a connected screen.
Image: Security
SUMODialoediviewergiftdetect

A secured version of Plex Media Server is now available for Qnap NAS systems. The update closes the Plex2Shell vulnerabilities, which attackers are currently exploiting in the wild.

Why the update matters

Plex Media Server is a popular way to stream personal video, music and photo libraries from a home or small-office NAS. Because the software runs on a device that often holds large amounts of personal data and may be reachable from the internet, flaws in it are an attractive target.

The Plex2Shell vulnerabilities are already being abused, which raises the urgency for anyone running the server on a Qnap device. Until the new package is installed, affected systems remain exposed to these attacks.

What users should do

Owners of Qnap NAS devices that run Plex Media Server should install the patched release as soon as possible. The fixed version had previously reached other platforms; Qnap users have had to wait for the NAS build, which has now been published.

The available information does not detail the technical specifics of the flaws or the exact version numbers, so administrators should check the current Plex Media Server release for their device and confirm that the update has been applied.

Apps worth a look

SUMO: the number puzzle

Tap the right tiles, add them up, hit the target. Easy to learn, hard to master. Free, for all ages.

Tags:qnapnasplexplex media serverplex2shellvulnerability

More from this day

See all →

More in: Security

See all →