Critical PHP vulnerabilities threaten your NAS, not every vendor has a fix

The Quick Take
Attackers are actively exploiting critical PHP flaws to target internet-exposed NAS devices. If your files and backups are stored there, they're probably at risk. TerraMaster Network Attached Storage PHP2Shell refers to two critical vulnerabilities in PHP, a scripting language used by web servers and some NAS services. The flaws, tracked as CVE-2026-109618 and CVE-2026-109619, could allow attacker
Ground Level News gathers headlines from public news feeds. This page shows a short summary only; the full article and all rights belong to AppleInsider.



