ACHTUNG: DRINGENDE WARNUNG vor der Nutzung des internen Webservers/PHP des NAS und vor Containern mit Internetzugriff

[Becker2020]

Es gibt auch eine Info von QNAP

https://www.qnap.com/en/security-advisory/qsa-26-18

und einen neuen Post von QNAP

[Security Notice] QNAP Statement on Critical PHP Vulnerabilities (PHP2Shell) & Security Advisory QSA-26-18

Hi everyone, Two critical vulnerabilities in PHP, known as “PHP2Shell” (CVE-2026-109618 and CVE-2026-109619, CVSS v4.0 score 9.2), have been disclosed. Multiple QNAP products are affected. Please see the official links below for details. QNAP is working on fixes, and updated versions will be released as they become available. For affected versions and the latest status, please see the official links below. Until fixes are released, we recommend that you: Keep your NAS off the public interne…