# Source: QNAP adviseert offline halen NAS-systemen wegens PHP2Shell - Security.NL

> Research: collected from outside sources and what this site derives from them; every fact links to a saved copy of its source.

Security.NL: what it says, the claims and events that cite it, and the hashes of every captured file.

Source · news · secondary · captured

# QNAP adviseert offline halen NAS-systemen wegens PHP2Shell - Security.NL

**Security.NL** · [https://www.security.nl/posting/958512/QNAP+adviseert+offline+halen+NAS-systemen+wegens+PHP2Shell](https://www.security.nl/posting/958512/QNAP+adviseert+offline+halen+NAS-systemen+wegens+PHP2Shell) · published 2026-10-22 10:14 (page time zone not stated; the capture's 'last updated' stamp reads 'yesterday, 13:26') · added by `curator@php.newsroom` · slug `security-nl-qnap-nas-offline`

Promoted from the source watch (pack copy 7r83qic5), snapshot 20261023T160435Z, queue priority 4 (mechanical selection by researcher@php.newsroom, read by the curator). Security.NL (Dutch), 22 October, updated: QNAP warns that its NAS software (QTS, QuTS hero, QuTScloud, Note Station, QNE, QVR Surveillance, TVR OS) co...

## What it says, as the collector read it

#### QNAP adviseert offline halen NAS-systemen wegens PHP2Shell - Security.NL

Promoted by curator@php.newsroom from the source watch (vault `oq9gflln`, read from its pack copy `7r83qic5`), page `nl/tech-press/security-nl/qnap-nas-offline`, snapshot `20261023T160435Z`. Copied byte for byte; every file's sha256 is in `captures/20261023T160435Z/provenance.json` and was re-checked against the watch's own hashes.

#### What the page says

_Curator's reading of the capture._

Security.NL (Dutch), 22 October, updated: QNAP warns that its NAS software (QTS, QuTS hero, QuTScloud, Note Station, QNE, QVR Surveillance, TVR OS) contains the PHP2Shell flaws, rates the impact critical, is working on updates with no date and advises taking the devices off the internet (switch off port forwarding, UPnP, myQNAPcloud Link and the built-in web server; use a VPN if remote access is needed). An update says QNAP's own PSIRT has observed scanning and exploitation attempts using the flaws and is monitoring them closely. It corroborates qnap-products-affected and qnap-attempts-in-wild, already held.

> QNAP waarschuwt eigenaren van de NAS-systemen die het levert dat de PHP2Shell-lekken ook daarin aanwezig zijn en adviseert om de apparaten voorlopig offline te halen.

_Curator's translation:_ "QNAP warns owners of the NAS systems it supplies that the PHP2Shell flaws are present in them too and advises taking the devices offline for the time being."

#### Why it is here

From the promotion queue (`index/promote.json`, priority 4): Mentions CVE-2026-109618/109619 or php2shell: "QNAP adviseert offline halen NAS-systemen wegens PHP2Shell - Security.NL". Selected mechanically, not read by a person.

#### Capture notes

Language `nl`. Nothing in the page addresses an AI or hides text from a reader.

## Claims that cite it

No claim cites this source yet.

## Events that cite it

No timeline event cites this source yet.

## The bytes
capture 20261023T160435Z · HTTP 200 · https://www.security.nl/posting/958512/QNAP+adviseert+offline+halen+NAS-systemen+wegens+PHP2Shell- `headers.json` 3836c557b4383e09f401eea5309562864ba592f256c5ea9a2b134dd133f1c5df 701 bytes
- `page.html` 377e1e671f7c9e2ade88ec81e9f703af4a14ee23fc92d42841ef1c1b8f901dab 58,347 bytes
- `provenance.json` 20e72fcfa72450adab3e9ac812f7ad660bdc406b84d3eaf825a506d2a14ebd39 1,691 bytes
- `rendered.html` 3084dbb6b62aa99ffd73e612981b4e397cab6101be5d2fe3295563b9656cf7bf 58,098 bytes
- `screenshot.jpg` e7a9d2a73383156caaf88db9d9b98d0ca3e05c4371b61bc2740a037d12a35366 652,301 bytes
- `text.txt` 5c047c35457e413b8690a77634d2b2b4ab8899a42d4c54c1f710bd2eecf5cef7 14,179 bytes

The captured files are held privately in the evidence vault and are not republished; the hashes above are what the vault recorded at capture time. [Every source →](../index.html)


---
site v0.22.36 · data as of 2026-10-26T17:09Z · vault commit 1dceaa1dfa7f · https://refs.php.oct.2026.newsroom.sgit.ai/sources/security-nl-qnap-nas-offline/index.html