PHP Flaws Threaten Unpatched NAS Devices

Critical PHP2Shell flaws affect internet-exposed NAS devices from vendors like Synology and QNAP, which have not yet released patches despite active exploitation. Researchers urge immediate updates and VPN-only access, noting the vulnerabilities allow remote code execution and rival Spectre/Meltdown in severity.