SecurityNotebookcheckabout 1 hour ago
QNAP and Synology Delay PHP2Shell Fixes
5 min read
Security flaws CVE-2026-109618 and CVE-2026-109619 allow unauthenticated code execution in PHP 8.5.12 and older versions. While OPNsense and pfSense released patches by Wednesday evening, QNAP issued advisory QSA-26-18 on October 22 with no fixed versions yet. Synology has not published an advisory as of Thursday, October 22, leaving users to keep devices offline or disable port forwarding until updates arrive.
Level
Hype check
Tap to vote and see what everyone thinks.
