Critical PHP vulnerabilities threaten your NAS, not every vendor has a fix
Attackers are actively exploiting critical PHP flaws to target internet-exposed NAS devices. If your files and backups are stored there, they're probably at risk. TerraMaster Network Attached Storage PHP2Shell refers to two critical vulnerabilities in PHP, a scripting language used by web servers and some NAS services. The flaws, tracked as CVE-2026-109618 and CVE-2026-109619, could allow…
We haven't written up this one. AppleInsider has the full story — the link below goes straight to it.
