SecurityAppleInsiderabout 1 hour ago
Critical PHP Flaws Threaten NAS Devices
4 min read
Attackers exploit critical PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619 to target internet-exposed NAS devices. The PHP team released security updates on October 21 for versions 8.2 through 8.5, yet Amazon detected an attempted exploit on October 17. While Synology released patches, QNAP confirmed a wider range of affected products on October 22 but has not said when fixes will be available.
Level
Hype check
Tap to vote and see what everyone thinks.
