Plex2Shell Exploited Against QNAP NAS Users
2026-11-09T13:23:59Z•b43381d8239eaef7447382f2c10a6600c3379684da25f521f67a08673cca3427
CVE-2026-19868Japan cybersecurityMFA bypassOpenSSHPlex Media ServerQNAP NASRSA-1024Russia-aligned threat actorsSAMLSSHoleSonicOSSonicWallVPN authentication bypassactive exploitationcloud service compromisecryptographydark webdata breacheducation sectorhealth datapersonal data exposure
What happened
SecurityWeek RSS digest covering active exploitation of vulnerabilities in Plex Media Server on QNAP NAS and OpenSSH authentication bypass, an exploited SonicOS VPN authentication weakness (CVE-2026-19868), multiple large-scale personal and health-data breaches, a politically attributed dark-web data leak, research on attacks against RSA-1024, and cybersecurity policy and industry developments.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- securityweek
- Record identifier
- b43381d8239eaef7447382f2c10a6600c3379684da25f521f67a08673cca3427
- Enrichment time
- 2026-11-09T13:23:59Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.