Plex2Shell chain of Plex Media Server flaws used to breach QNAP NAS devices

Summary

Attackers are breaching QNAP NAS devices through the Plex2Shell chain of four flaws in Plex Media Server. Users running a vulnerable Plex server exposed on the public web are affected.

Affected when

• Plex Media Server exposed on the public web

What to do

Update Plex Media Server to 1.43.3.10861 or later. If you may be compromised, follow QNAP's security bulletin checks, reinstall QTS or QuTS hero cleanly, then reset Plex and NAS credentials. If you do not need remote access, disable the related features and stop forwarding port 32400.

Products and platforms

• Plex Media Server

Sources

• Write-up: QNAP says hackers breaching NAS devices in Plex2Shell attacks (opens in a new tab)

Times

First published 2026-11-06 17:04 UTC

First seen 2026-11-09 17:40 UTC