Network Attached Storage (NAS) product giants Synology and QNAP have issued warnings to their users stating that some of their appliances are currently exposed to compromise due to three (3) Netatalk critical vulnerabilities. Netatalk is an open-source Apple Filing Protocol (AFP) allowing *NIX/*BSD systems to operate as AppleShare file servers for macOS. Specifically, these flaws affect Synology DiskStation Manager (DSM) and Synology Router Manager (SRM) and allow unauthenticated remote attackers to pilfer sensitive data and execute arbitrary code. The vulnerabilities were first exploited during the Pwn2Own 2021 hacking competition, with a proof-of-concept (PoC) exploit provided by NCC Group’s EDG team. The flaws were partially patched by Netatalk in March of 2022. Currently, these flaws have been completely mitigated for appliances running DiskStation Manager (DSM) 7.1 or later, but some other products are still being patched, and therefore susceptible to attack. QNAP is currently in a similar state, where appliances running QTS 4.5.4.2012 build 20220419 and later have been successfully patched, but older products are still in the works. QNAP has recommended that NAS devices running AFP should disable the protocol for the time being, while the vulnerabilities are being patched. The CTIX team will follow this matter and release an update when more security patches have been implemented.