Hi everyone, Two critical vulnerabilities in PHP, known as “PHP2Shell” (CVE-2026-109618 and CVE-2026-109619, CVSS v4.0 score 9.2), have been disclosed. Multiple QNAP products are affected. Please see the official links below for details. QNAP is working on fixes, and updated versions will be relea…

There are Security Updates Applied multiple security updates to further enhance system security (PHP2Shell: CVE-2026-109618 and CVE-2026-109619). QuTS hero h6.0.2.3656 build 20261023 Public Beta QuTS hero h5.2.11.3661 build 20261023 Public Beta QTS 5.2.11.3661 build 20261023 Public Beta

QNAP Community

[Security Notice] QNAP Statement on Critical PHP Vulnerabilities (PHP2Shell) & Security Advisory QSA-26-18

English