# Critical PHP vulnerabilities threaten your NAS, not every vendor has a fix

- Source: AppleInsider
- Published: 2026-10-22T15:52:38+00:00
- Category: Tech
- Original: https://appleinsider.com/articles/26/10/22/critical-php-vulnerabilities-threaten-your-nas-not-every-vendor-has-a-fix?utm_source=rss
- Canonical: https://groundlevelnews.com/story/critical-php-vulnerabilities-threaten-your-nas-not-every-vendor-has-a--9bd31a/

Attackers are actively exploiting critical PHP flaws to target internet-exposed NAS devices. If your files and backups are stored there, they're probably at risk. TerraMaster Network Attached Storage PHP2Shell refers to two critical vulnerabilities in PHP, a scripting language used by web servers and some NAS services. The flaws, tracked as CVE-2026-109618 and CVE-2026-109619, could allow attacker

_Ground Level News shows a short summary only; the full article and all rights belong to AppleInsider._