Critical PHP vulnerabilities threaten your NAS, not every vendor has a fix

Attackers are actively exploiting critical PHP flaws to target internet-exposed NAS devices. If your files and backups are stored there, they're probably at risk.TerraMaster Network Attached StoragePHP2Shell refers to two critical vulnerabilities in PHP, a scripting language used by web servers and some NAS services. The flaws, tracked as CVE-2026-109618 and CVE-2026-109619, could allow attackers to execute code on affected…

Summary from the AppleInsider feed. The full story lives on their site.