{"id":22083,"date":"2026-10-23T05:56:32","date_gmt":"2026-10-22T21:56:32","guid":{"rendered":"https:\/\/synopower.club\/?p=22083"},"modified":"2026-10-23T05:56:32","modified_gmt":"2026-10-22T21:56:32","slug":"synology-php2shell-emergency-patch","status":"publish","type":"post","link":"https:\/\/synopower.club\/ko\/synology-php2shell-emergency-patch\/","title":{"rendered":"Synology\uc5d0\uc11c PHP2Shell \uc0ac\uc6a9: \ud558\ub8e8 \ub9cc\uc5d0 6\uac1c \uc0ac\uc774\ud2b8 \ud328\uce58 \uc644\ub8cc \uc0ac\ub840"},"content":{"rendered":"<p class=\"wp-block-paragraph\"><strong>PHP2\uc258<\/strong> PHP2Shell\uc740 \uc5c5\uacc4\uc5d0\uc11c \ud569\uc758\ud55c CVE-2026-109618 \ubc0f CVE-2026-109619\uc758 \uc774\ub984\uc73c\ub85c, \uc778\uc99d \uc5c6\uc774 \uc6d0\uaca9 \ucf54\ub4dc \uc2e4\ud589\uc744 \ud5c8\uc6a9\ud558\ub294 PHP \uc5d4\uc9c4 \uc790\uccb4\uc758 \uc2ec\uac01\ud55c \ucde8\uc57d\uc810 \ub450 \uac00\uc9c0\uc785\ub2c8\ub2e4. \uc774 \ucde8\uc57d\uc810\uc5d0 \ub300\ud55c \uc138\ubd80 \uc815\ubcf4\ub294 \uacf5\ub3d9 \uacf5\uac1c \ud558\ub8e8 \uc804\uc778 2026\ub144 10\uc6d4 20\uc77c\uc5d0 \uc720\ucd9c\ub418\uc5c8\uace0, PHP \ud504\ub85c\uc81d\ud2b8\ub294 10\uc6d4 21\uc77c\uc5d0 \uae34\uae09 \ub9b4\ub9ac\uc2a4\ub97c \ubc30\ud3ec\ud588\uc2b5\ub2c8\ub2e4. \uc774 \ubc84\uadf8\ub294 \uc560\ud50c\ub9ac\ucf00\uc774\uc158\uc774 \uc544\ub2cc \uc778\ud130\ud504\ub9ac\ud130\uc5d0 \uc874\uc7ac\ud558\uae30 \ub54c\ubb38\uc5d0 WordPress, Joomla \ub610\ub294 MediaWiki\ub97c \ud328\uce58\ud574\ub3c4 \uc544\ubb34\ub7f0 \ud6a8\uacfc\uac00 \uc5c6\uc2b5\ub2c8\ub2e4. \uc720\uc77c\ud55c \ud574\uacb0\ucc45\uc740 \uc0c8\ub85c\uc6b4 PHP \ube4c\ub4dc\ub97c \ub9cc\ub4dc\ub294 \uac83\uc785\ub2c8\ub2e4. \uc800\ud76c\ub294 Synology \ud558\ub4dc\uc6e8\uc5b4\uc5d0\uc11c 6\uac1c\uc758 \uacf5\uac1c WordPress \uc0ac\uc774\ud2b8\ub97c \uc6b4\uc601\ud558\uace0 \uc788\ub294\ub370, PHP2Shell \ub54c\ubb38\uc5d0 \ubaa8\ub4e0 \uc0ac\uc774\ud2b8\ub97c \uac19\uc740 \uc8fc\uc5d0 \ub2e4\uc2dc \ube4c\ub4dc\ud574\uc57c \ud588\uc2b5\ub2c8\ub2e4. \uc774 \uac00\uc774\ub4dc\uc5d0\uc11c\ub294 \ubc84\uadf8\uc758 \uc2e4\uc81c \ub0b4\uc6a9, \ud328\ud0a4\uc9c0 \uc13c\ud130\ub97c \ud1b5\ud574 DSM\uc5d0\uc11c \ud328\uce58\ud558\ub294 \ubc29\ubc95, \ucee8\ud14c\uc774\ub108\uc5d0\uc11c \uc0ac\uc774\ud2b8\ub97c \uc2e4\ud589\ud560 \ub54c \ucc98\ub9ac\ud558\ub294 \ubc29\ubc95, \uadf8\ub9ac\uace0 Synology\uc5d0\uc11c \ubc30\ud3ec\ud55c \ubc84\uc804\uacfc \ub2e4\ub978 NAS \uc81c\uc870\uc0ac\ub4e4\uc774 \uc9c0\uae08\uae4c\uc9c0 \uc81c\uacf5\ud55c \ubc84\uc804 \uac04\uc758 \ubd88\ud3b8\ud55c \ube44\uad50\uc5d0 \ub300\ud574 \ub2e4\ub8f9\ub2c8\ub2e4.<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p class=\"wp-block-paragraph\"><strong>SynoPower Club \ud3ec\uc778\ud2b8:<\/strong>\uc800\ud76c \uc5ec\uc12f \uac1c \uc0ac\uc774\ud2b8\ub294 PHP2Shell \uad8c\uace0 \uc0ac\ud56d\uc774 \ubc1c\ud45c\ub41c \ud6c4 \ub2e8 \ud558\ub8e8 \ub9cc\uc5d0 \ud328\uce58\uac00 \uc644\ub8cc\ub418\uc5c8\uc2b5\ub2c8\ub2e4. \uc774\ub294 \ub2e8\uc21c\ud788 \uc804\ubb38\uac00\ub4e4\uc758 \ub178\ub825 \ub355\ubd84\uc774 \uc544\ub2c8\ub77c, Synology\uc5d0\uc11c \uad8c\uace0 \uc0ac\ud56d \ubc1c\ud45c \ub2f9\uc77c\uc5d0 \uc218\uc815\ub41c \ud328\ud0a4\uc9c0\ub97c \ubc30\ud3ec\ud588\uae30 \ub54c\ubb38\uc785\ub2c8\ub2e4. Synology-SA-26:14\ub294 10\uc6d4 22\uc77c\uc5d0 &#039;\ud574\uacb0\ub428&#039; \uc0c1\ud0dc\uc640 \ud568\uaed8 PHP 7.4\uae4c\uc9c0\uc758 \uc218\uc815 \ubc84\uc804 \ubaa9\ub85d\uc774 \ud3ec\ud568\ub41c \uc804\uccb4 \ud45c\ub97c \ubc30\ud3ec\ud588\uc2b5\ub2c8\ub2e4. \uac19\uc740 \ub0a0 QNAP\uc740 &#039;\uc218\uc815 \uc911&#039; \uc0c1\ud0dc\uc640 \ud568\uaed8 \ubaa8\ub4e0 \uc218\uc815 \ubc84\uc804 \ud56d\ubaa9\uc5d0 &#039;\ucd94\ud6c4 \uacf5\uc9c0 \uc608\uc815&#039;\uc774\ub77c\ub294 \ubb38\uad6c\uac00 \uc801\ud78c QSA-26-18\uc744 \uac8c\uc2dc\ud588\uace0, ASUSTOR\ub294 \ud328\uce58\ub97c \ubc30\ud3ec\ud558\ub294 \ub300\uc2e0 App Central\uc5d0\uc11c \uae30\uc874 PHP \ubc84\uc804\uc744 \uc0ad\uc81c\ud558\ub294 \uac83\uc73c\ub85c \ub300\uc751\ud588\uc2b5\ub2c8\ub2e4. NAS\uc5d0 \uacf5\uac1c \uc6f9\uc0ac\uc774\ud2b8\ub97c \uc790\uccb4 \ud638\uc2a4\ud305\ud558\ub294 \uacbd\uc6b0, \uc774\ub7ec\ud55c \uc2dc\uac04\uc801 \ucc28\uc774\ub294 \ub2e8\uc21c\ud55c \ub9c8\ucf00\ud305 \uc804\ub7b5\uc774 \uc544\ub2d9\ub2c8\ub2e4. \ud328\ud0a4\uc9c0\ub97c \uc5c5\ub370\uc774\ud2b8\ud558\ub294 \uac83\uacfc \ud328\uce58\uac00 \ub098\uc62c \ub54c\uae4c\uc9c0 \uc0ac\uc774\ud2b8\ub97c \uc778\ud130\ub137\uc5d0\uc11c \ucc28\ub2e8\ud558\ub294 \uac83 \uc0ac\uc774\uc758 \ucc28\uc774\uc785\ub2c8\ub2e4.<\/p>\n<\/blockquote>\n\n\n\n<h2 id=\"what-is-php2shell-and-why-it-is-different\" class=\"wp-block-heading\">PHP2Shell\uc774\ub780 \ubb34\uc5c7\uc774\uba70, \uae30\uc874 \uc11c\ube44\uc2a4\uc640 \uc5b4\ub5a4 \ucc28\uc774\uc810\uc774 \uc788\ub098\uc694?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">PHP2Shell\uc740 \ud558\ub098\uc758 \ubc84\uadf8\uac00 \uc544\ub2c8\ub77c, PHP\uac00 \uba54\ubaa8\ub9ac \ubd80\uc871\uc73c\ub85c \uc778\ud574 \uc694\uccad\uc774 \uc885\ub8cc\ub41c \ud6c4 \uc815\ub9ac \uc791\uc5c5\uc744 \uc218\ud589\ud558\ub294 \ubc29\uc2dd\uc5d0\uc11c \ubc1c\uc0dd\ud558\ub294 \uc5ec\ub7ec \uad00\ub828 \uba54\ubaa8\ub9ac \uc548\uc804\uc131 \uc2e4\ud328\uc758 \uc9d1\ud569\uccb4\uc785\ub2c8\ub2e4. PHP\ub294 \ub2e4\uc74c\uacfc \uac19\uc740 \ubc29\uc2dd\uc744 \uc0ac\uc6a9\ud569\ub2c8\ub2e4. <code>longjmp()<\/code> \uce58\uba85\uc801\uc778 \uc624\ub958, \ud2b9\ud788 \uba54\ubaa8\ub9ac \ubd80\uc871 \uc624\ub958\ub97c \ud53c\ud558\uae30 \uc704\ud574 \ud574\ub2f9 \uc810\ud504\ub294 \uc77c\ubc18\uc801\uc73c\ub85c \uc5d4\uc9c4\uc744 \uc54c\ub824\uc9c4 \uc0c1\ud0dc\ub85c \ub418\ub3cc\ub9ac\ub294 \uc815\ub9ac \ucf54\ub4dc\ub97c \uac74\ub108\ub701\ub2c8\ub2e4. \ud574\ub2f9 \uc0c1\ud0dc \uc911 \uc77c\ubd80\ub294 \uc804\uc5ed\uc801\uc73c\ub85c \uc800\uc7a5\ub418\uc5b4 \ub3d9\uc77c\ud55c \uc791\uc5c5\uc790 \ud504\ub85c\uc138\uc2a4\uac00 \ucc98\ub9ac\ud558\ub294 \ub2e4\uc74c \uc694\uccad\uae4c\uc9c0 \uc720\uc9c0\ub429\ub2c8\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">CVE-2026-109618\uc740 \uba54\ubaa8\ub9ac \ubd80\uc871 \ucde8\uc57d\uc810\uc785\ub2c8\ub2e4. \uc870\uc791\ub41c HTTP \uc694\uccad\uc774 \uc694\uccad \ub370\uc774\ud130\uac00 \ubd80\ubd84\uc801\uc73c\ub85c\ub9cc \ucd08\uae30\ud654\ub41c \uc0c1\ud0dc\uc5d0\uc11c \uba54\ubaa8\ub9ac \uc81c\ud55c\uc744 \ucd08\uacfc\ud558\uba74, \uc815\ub9ac \ub8e8\ud2f4\uc774 \uc644\ub8cc\ub418\uc9c0 \uc54a\uc740 \uad6c\uc870\uccb4\ub97c \ud0d0\uc0c9\ud558\uac8c \ub429\ub2c8\ub2e4. CVE-2026-109619\ub294 \ud574\uc81c \ud6c4 \uc0ac\uc6a9(use-after-free) \ucde8\uc57d\uc810\uc785\ub2c8\ub2e4. \ud574\uc81c\ub41c \uc694\uccad \uba54\ubaa8\ub9ac\ub97c \uac00\ub9ac\ud0a4\ub294 \uc804\uc5ed \uc0c1\ud0dc\uac00 \ub3d9\uc77c\ud55c \uc6cc\ucee4\uc5d0\uc11c \ub098\uc911\uc5d0 \ubc1c\uc0dd\ud558\ub294 \uc694\uccad\uc5d0 \uc758\ud574 \uc77d\ud790 \uc218 \uc788\uc73c\uba70, \uc774\ub85c \uc778\ud574 \ubc84\uadf8\uac00 \ucf54\ub4dc \uc2e4\ud589\uc774\ub098 \uba54\ubaa8\ub9ac \uc720\ucd9c\ub85c \uc774\uc5b4\uc9c8 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">PHP2Shell \ucde8\uc57d\uc810\uc740 \uc77c\ubc18\uc801\uc778 PHP \ubcf4\uc548 \uad8c\uace0\ubcf4\ub2e4 \ub450 \uac00\uc9c0 \uc810\uc5d0\uc11c \ub354 \uc2ec\uac01\ud569\ub2c8\ub2e4. \uccab\uc9f8, \uc0ac\uc804 \uc778\uc99d \ub2e8\uacc4\uae4c\uc9c0 \uacf5\uaca9\ud55c\ub2e4\ub294 \uc810\uc785\ub2c8\ub2e4. \ub450 \ucde8\uc57d\uc810 \ubaa8\ub450 \uc560\ud50c\ub9ac\ucf00\uc774\uc158 \uc218\uc900\uc758 \uc778\uc99d\uc774 \uc2e4\ud589\ub418\uae30 \uc804\uc5d0 \ubc1c\uc0dd\ud558\ubbc0\ub85c \ub85c\uadf8\uc778 \uc7a5\ubcbd, \ud68c\uc6d0 \uad00\ub9ac \ud50c\ub7ec\uadf8\uc778 \ub610\ub294 \uad00\ub9ac\uc790 \ube44\ubc00\ubc88\ud638\ub85c\ub294 \uc544\ubb34\uac83\ub3c4 \ubcf4\ud638\ud560 \uc218 \uc5c6\uc2b5\ub2c8\ub2e4. \ub458\uc9f8, \uba54\ubaa8\ub9ac \ub178\ucd9c \ubcc0\uc885\uc740 \uc6cc\ucee4 \ud504\ub85c\uc138\uc2a4\uc758 \uba54\ubaa8\ub9ac\ub97c \uc720\ucd9c\ud569\ub2c8\ub2e4. WordPress \uc0ac\uc774\ud2b8\uc758 PHP \uc6cc\ucee4 \ud504\ub85c\uc138\uc2a4\ub294 \ub370\uc774\ud130\ubca0\uc774\uc2a4 \uc790\uaca9 \uc99d\uba85, API \ud1a0\ud070 \ubc0f \uacb0\uc81c \ud0a4\ub97c \ucc98\ub9ac\ud558\uace0 \uc788\uc2b5\ub2c8\ub2e4. \uba54\ubaa8\ub9ac \uc77d\uae30\uc5d0 \uc131\uacf5\ud558\uba74 \ucf54\ub4dc \uc2e4\ud589\uc5d0 \ub3c4\ub2ec\ud558\uc9c0 \uc54a\ub354\ub77c\ub3c4 \uc2ec\uac01\ud55c \ubcf4\uc548 \ubb38\uc81c\ub97c \uc57c\uae30\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">PHP2Shell\uc758 \ub450 \uac00\uc9c0 CVE\ub294 PHP \ubcf4\uc548 \ud300\uc5d0\uc11c CVSS v4.0 9.2 \ub4f1\uae09\uc73c\ub85c \ud3c9\uac00\ub418\uc5c8\uc2b5\ub2c8\ub2e4. Synology\ub294 \uc790\uccb4 \uad8c\uace0\uc548\uc5d0\uc11c CVSS v3.1 \uae30\uc900\uc73c\ub85c 9.8 \ub4f1\uae09\uc744 \ubd80\uc5ec\ud588\uc2b5\ub2c8\ub2e4. \ud3c9\uac00 \ucc99\ub3c4\ub294 \ub2e4\ub974\uc9c0\ub9cc \uacb0\ub860\uc740 \uac19\uc2b5\ub2c8\ub2e4. \uacf5\uaca9 \uc0ac\ub840 \ubcf4\uace0\ub294 \uc5c7\uac08\ub9bd\ub2c8\ub2e4. watchTowr\ub294 \ud5c8\ub2c8\ud31f \ub124\ud2b8\uc6cc\ud06c\ub97c \ub300\uc0c1\uc73c\ub85c \ud55c \uacf5\uaca9 \uc2dc\ub3c4\ub97c \ud3ec\ucc29\ud588\ub2e4\uace0 \ubc1d\ud614\uc9c0\ub9cc, Bitdefender\ub294 \uc791\uc131 \uc2dc\uc810\uae4c\uc9c0 \uc6d0\uaca9 \uce21\uc815 \ub370\uc774\ud130\uc5d0\uc11c \uc544\ubb34\ub7f0 \uc815\ubcf4\ub97c \uc218\uc9d1\ud558\uc9c0 \ubabb\ud588\uc73c\uba70, QNAP\uc740 \uc790\uc0ac \uc81c\ud488\uc744 \ud45c\uc801\uc73c\ub85c \ud55c \uacf5\uaca9 \ubcf4\uace0\ub97c \ubc1b\uc9c0 \ubabb\ud588\ub2e4\uace0 \ubc1d\ud614\uc2b5\ub2c8\ub2e4.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"eager\" decoding=\"async\" width=\"1400\" height=\"852\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" src=\"https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/php2shell-synology-advisory.webp\" alt=\"Synology-SA-26:14 PHP2Shell \uad8c\uace0 \uc0ac\ud56d: \uc0c1\ud0dc\ub294 \ud574\uacb0\ub428\uc774\uba70 \uc218\uc815\ub41c \ubc84\uc804 \ud45c\uac00 \ud45c\uc2dc\ub429\ub2c8\ub2e4.\" class=\"wp-image-22078\" srcset=\"https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/php2shell-synology-advisory.webp 1400w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/php2shell-synology-advisory-300x183.webp 300w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/php2shell-synology-advisory-1024x623.webp 1024w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/php2shell-synology-advisory-768x467.webp 768w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/php2shell-synology-advisory-18x12.webp 18w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/php2shell-synology-advisory-600x365.webp 600w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/php2shell-synology-advisory-400x243.webp 400w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/php2shell-synology-advisory-1000x609.webp 1000w\"  fetchpriority=\"high\"\/><figcaption class=\"wp-element-caption\">Synology-SA-26:14, 2026\ub144 10\uc6d4 22\uc77c 19:45 UTC+8\uc5d0 \uac8c\uc2dc\ub418\uc5c8\uc73c\uba70 \uc0c1\ud0dc\ub294 \ud574\uacb0\ub428\uc785\ub2c8\ub2e4.<\/figcaption><\/figure>\n\n\n\n<h2 id=\"php2shell-vs-a-normal-wordpress-exploit\" class=\"wp-block-heading\">PHP2Shell\uacfc \uc77c\ubc18\uc801\uc778 WordPress \ucde8\uc57d\uc810 \ube44\uad50<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\uacf5\uac1c\ub41c WordPress \uc0ac\uc774\ud2b8\ub97c \uacf5\uaca9\ud558\ub294 \ub300\ubd80\ubd84\uc758 \ubb38\uc81c\ub294 \ud50c\ub7ec\uadf8\uc778 \ucde8\uc57d\uc810 \ub54c\ubb38\uc785\ub2c8\ub2e4. \uadf8 \ud328\ud134\uc740 \uc775\uc219\ud569\ub2c8\ub2e4. \ud50c\ub7ec\uadf8\uc778\uc774 \uacb0\ud568 \uc788\ub294 REST \uc5d4\ub4dc\ud3ec\uc778\ud2b8\ub97c \uc81c\uacf5\ud558\uace0, \uc2a4\uce90\ub108\uac00 \uc774\ub97c \ubc1c\uacac\ud558\uba74, \ud50c\ub7ec\uadf8\uc778\uc744 \uc5c5\ub370\uc774\ud2b8\ud558\uc5ec \ucde8\uc57d\uc810\uc744 \ud574\uacb0\ud558\ub294 \uc2dd\uc785\ub2c8\ub2e4. PHP2Shell\uc740 \uc774\ub7ec\ud55c \uad00\ud589\uc744 \uc644\uc804\ud788 \ubc14\uafd4\ub193\uc73c\uba70, \ud50c\ub7ec\uadf8\uc778 \ucde8\uc57d\uc810\uc744 \uac10\uc0ac\ud558\ub294 \uac83\uc740 \uc2dc\uac04 \ub0ad\ube44\uc77c \ubfd0\uc785\ub2c8\ub2e4.<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><thead><tr><th>\uce21\uba74<\/th><th>\uc77c\ubc18\uc801\uc778 \ud50c\ub7ec\uadf8\uc778 CVE<\/th><th>PHP2\uc258<\/th><\/tr><\/thead><tbody><tr><td>\ubc8c\ub808\uac00 \uc0ac\ub294 \uacf3<\/td><td>\uc560\ud50c\ub9ac\ucf00\uc774\uc158 \ucf54\ub4dc(\ud50c\ub7ec\uadf8\uc778 \ub610\ub294 \ud14c\ub9c8)<\/td><td>PHP \uc778\ud130\ud504\ub9ac\ud130 \uc790\uccb4<\/td><\/tr><tr><td>\ub204\uac00 \uadf8\uac83\uc744 \uc791\ub3d9\uc2dc\ud0ac \uc218 \uc788\ub098\uc694?<\/td><td>\uad6c\ub3c5\uc790 \ub610\ub294 \uad00\ub9ac\uc790 \uc5ed\ud560\uc774 \ud544\uc694\ud55c \uacbd\uc6b0\uac00 \ub9ce\uc2b5\ub2c8\ub2e4.<\/td><td>\uc544\ubb34\ub3c4. \uc571 \ub85c\uc9c1\uc774 \uc2e4\ud589\ub418\uae30 \uc804, \uc0ac\uc804 \uc778\uc99d \ub2e8\uacc4\uc785\ub2c8\ub2e4.<\/td><\/tr><tr><td>\uc6cc\ub4dc\ud504\ub808\uc2a4 \uc5c5\ub370\uc774\ud2b8\uac00 \ub3c4\uc6c0\uc774 \ub418\ub098\uc694?<\/td><td>\ubcf4\ud1b5 \uadf8\ub807\uc2b5\ub2c8\ub2e4<\/td><td>\uc544\ub2c8\uc694. \ucf54\uc5b4 \ubc0f \ud50c\ub7ec\uadf8\uc778 \uc5c5\ub370\uc774\ud2b8\ub294 \uad00\ub828\uc774 \uc5c6\uc2b5\ub2c8\ub2e4.<\/td><\/tr><tr><td>WAF(\uc544\ub0b4 \uc2b9\uc778 \ud3ec\ub7fc)\uac00 \uc774\ub97c \ub9c9\uc744 \uc218 \uc788\uc744\uae4c\uc694?<\/td><td>\uc77c\ubc18\uc801\uc73c\ub85c \uaddc\uce59\uc774 \uc77c\ub2e8 \uc874\uc7ac\ud558\uac8c \ub418\uba74<\/td><td>\ubd80\ubd84\uc801\uc73c\ub85c \uadf8\ub807\uc2b5\ub2c8\ub2e4. \uc694\uccad \ud615\ud0dc \uaddc\uce59\uc5d0 OOM \uacbd\ub85c\uac00 \ub204\ub77d\ub418\uc5c8\uc2b5\ub2c8\ub2e4.<\/td><\/tr><tr><td>\ubb34\uc5c7\uc774 \uc2e4\uc81c\ub85c \ubb38\uc81c\ub97c \ud574\uacb0\ud560\uae4c\uc694?<\/td><td>\ud50c\ub7ec\uadf8\uc778 \uc5c5\ub370\uc774\ud2b8<\/td><td>\uc0c8\ub85c\uc6b4 PHP \ube4c\ub4dc\uc77c \ubfd0\uc785\ub2c8\ub2e4. \uadf8 \uc678\uc5d0\ub294 \uc544\ubb34\uac83\ub3c4 \uc5c6\uc2b5\ub2c8\ub2e4.<\/td><\/tr><tr><td>\ud3ed\ubc1c \ubc18\uacbd<\/td><td>\ud55c \uc0ac\uc774\ud2b8\uc5d0 \ud558\ub098\uc758 \uae30\ub2a5<\/td><td>\uc11c\ubc84\uc5d0 \uc788\ub294 \ubaa8\ub4e0 PHP \uc0ac\uc774\ud2b8\ub97c \ud55c \ubc88\uc5d0<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">\ub9c8\uc9c0\ub9c9 \uc904 \ub54c\ubb38\uc5d0 PHP2Shell \uc791\uc5c5\uc774 \uc624\ud6c4 \uc2dc\uac04\uc774 \uc544\ub2c8\ub77c \ud558\ub8e8 \uc885\uc77c \uac78\ub9ac\ub294 \uc791\uc5c5\uc774 \ub418\uc5c8\uc2b5\ub2c8\ub2e4. NAS\uc5d0 \uc788\ub294 \ud558\ub098\uc758 \uacf5\uc720 PHP \ud328\ud0a4\uc9c0\uac00 \uc218\uc2ed \uac1c\uc758 \uc6f9 \uc2a4\ud14c\uc774\uc158 \uac00\uc0c1 \ud638\uc2a4\ud2b8 \ub4a4\uc5d0 \uc788\uc744 \uc218 \uc788\uace0, \ud558\ub098\uc758 \ucee8\ud14c\uc774\ub108 \uc774\ubbf8\uc9c0\uac00 \uc5ec\ub7ec \uc0ac\uc774\ud2b8\uc758 \uae30\ubc18\uc774 \ub420 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \ud328\uce58\ub294 \uc0ac\uc774\ud2b8\ubcc4\uc774 \uc544\ub2c8\ub77c \ub7f0\ud0c0\uc784\ubcc4\ub85c \uc801\uc6a9\ub418\ubbc0\ub85c, \uc791\uc5c5\uc774 \uc644\ub8cc\ub418\uc5c8\ub2e4\uace0 \ub9d0\ud558\uae30 \uc804\uc5d0 \ubaa8\ub4e0 \ub7f0\ud0c0\uc784\uc744 \uc5f4\uac70\ud574\uc57c \ud569\ub2c8\ub2e4.<\/p>\n\n\n\n<h2 id=\"how-to-tell-if-your-nas-is-exposed\" class=\"wp-block-heading\">NAS\uac00 \uc678\ubd80\uc5d0 \ub178\ucd9c\ub418\uc5c8\ub294\uc9c0 \ud655\uc778\ud558\ub294 \ubc29\ubc95<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">PHP2Shell \ub178\ucd9c \uc5ec\ubd80\ub97c \ud310\ub2e8\ud558\ub824\uba74 \ub450 \uac00\uc9c0 \uc9c8\ubb38\uc744 \uad6c\ubd84\ud558\ub294 \uac83\ubd80\ud130 \uc2dc\uc791\ud574\uc57c \ud569\ub2c8\ub2e4. \ud574\ub2f9 \uc2dc\uc2a4\ud15c\uc5d0 \ucde8\uc57d\ud55c PHP \ube4c\ub4dc\uac00 \uc788\ub294\uc9c0, \uadf8\ub9ac\uace0 \uadf8 \ube4c\ub4dc\uac00 \uc778\ud130\ub137\uc5d0\uc11c \uc811\uadfc \uac00\ub2a5\ud55c\uc9c0 \uc5ec\ubd80\uc785\ub2c8\ub2e4. Synology\ub294 \uc774 \ub450 \uac00\uc9c0\ub97c \uba85\ud655\ud788 \uad6c\ubd84\ud569\ub2c8\ub2e4. DSM\uc5d0\ub294 \uc6b4\uc601 \uccb4\uc81c\uc5d0\uc11c \uc0ac\uc6a9\ud558\ub294 \ub0b4\ubd80 PHP \uad6c\uc131 \uc694\uc18c\uac00 \ud3ec\ud568\ub418\uc5b4 \uc788\uc73c\uba70, Synology\uc5d0 \ub530\ub974\uba74 \uc774 \uad6c\uc131 \uc694\uc18c\uc5d0\ub294 \uc678\ubd80\uc5d0\uc11c \uc811\uadfc \uac00\ub2a5\ud55c \ubaa8\ub4c8\uc774 \uc5c6\uc73c\ubbc0\ub85c \uacf5\uaca9 \ud45c\uba74\uc774 \ub178\ucd9c\ub418\uc9c0 \uc54a\uc2b5\ub2c8\ub2e4. \ub530\ub77c\uc11c \ud574\ub2f9 \uad6c\uc131 \uc694\uc18c\uc5d0 \ub300\ud55c \uc704\ud5d8\ub3c4\ub294 \ucd5c\uc18c\ud55c\uc774\uba70, \ucde8\uc57d\uc810 \uac80\uc0ac\uc5d0\uc11c \ub354 \uc774\uc0c1 \ucde8\uc57d\uc810\uc73c\ub85c \ud45c\uc2dc\ub418\uc9c0 \uc54a\ub3c4\ub85d \ud5a5\ud6c4 DSM \ub9b4\ub9ac\uc2a4\uc5d0 \ud328\uce58\uac00 \ud3ec\ud568\ub420 \uc608\uc815\uc785\ub2c8\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">PHP2Shell\uc5d0 \uc911\uc694\ud55c \ud328\ud0a4\uc9c0\ub294 \uc6f9\uc5d0 PHP\ub97c \uc81c\uacf5\ud558\ub294 \ud328\ud0a4\uc9c0\uc785\ub2c8\ub2e4. Synology\uc5d0\ub294 Calendar, IDrive, Joomla, KodExplorer, MailStation, MediaWiki, phpMyAdmin, vtigerCRM, Web Station \ubc0f WordPress\uac00 \ub098\uc5f4\ub418\uc5b4 \uc788\uc2b5\ub2c8\ub2e4. \uc774\ub7ec\ud55c \ud328\ud0a4\uc9c0 \uc911 \ud558\ub098\ub77c\ub3c4 \uc124\uce58\ub418\uc5b4 \uc788\uace0 \uc811\uadfc \uac00\ub2a5\ud55c \uacbd\uc6b0 PHP2Shell\uc758 \uc801\uc6a9 \ubc94\uc704\uc5d0 \ud3ec\ud568\ub429\ub2c8\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\ub300\uc2dc\ubcf4\ub4dc\ub97c \uc2e0\ub8b0\ud558\uae30\ubcf4\ub2e4\ub294 \ubc84\uc804\uc744 \uc9c1\uc811 \ud655\uc778\ud558\uc138\uc694. \ud328\ud0a4\uc9c0 \uc13c\ud130\uc5d0\uc11c\ub294 \uc124\uce58\ub41c PHP \ud328\ud0a4\uc9c0\uc758 \ud0c0\uc77c\uc5d0 \ubc84\uc804\uc774 \ud45c\uc2dc\ub418\uace0, \uc5c5\ub370\uc774\ud2b8 \uc54c\ub9bc\uc5d0\ub294 \ub300\uc0c1 \ube4c\ub4dc \uc774\ub984\uc774 \ub098\uc635\ub2c8\ub2e4. \uc178\uc5d0\uc11c \ub7f0\ud0c0\uc784 \uc790\uccb4\uc5d0 \ubb38\uc758\ud560 \uc218\ub3c4 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code># Synology PHP \ud328\ud0a4\uc9c0(\uc2e4\ud589\ud558\ub294 \ubc84\uc804\uc5d0 \ub9de\uac8c \uacbd\ub85c\ub97c \uc870\uc815\ud558\uc138\uc694) \/volume1\/@appstore\/PHP8.2\/usr\/local\/bin\/php -v # \ucee8\ud14c\uc774\ub108\ud654\ub41c \uc0ac\uc774\ud2b8 docker exec php -v<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\uace0\uc9d1\ud574\uc57c \ud558\ub294 \uc774\uc720 <code>php -v<\/code> PHP2Shell\uc744 \uac80\uc0ac\ud560 \ub54c \uac00\uc7a5 \ud070 \ubb38\uc81c\ub294 \ub2e4\ub978 \ubaa8\ub4e0 \uc2e0\ud638\uac00 \uac70\uc9d3\uc774\ub77c\ub294 \uac83\uc785\ub2c8\ub2e4. \ube4c\ub4dc \ucd9c\ub825\uc740 \uce90\uc2dc\ub41c \ub808\uc774\uc5b4\ub97c \uc7ac\uc0ac\uc6a9\ud558\uba74\uc11c\ub3c4 \uc131\uacf5\uc73c\ub85c \ubcf4\uace0\ud560 \uc218 \uc788\uace0, \ub300\uc2dc\ubcf4\ub4dc\ub294 \uc2e4\ud589 \uc911\uc778 \uc6cc\ucee4\uac00 \ucd5c\uc2e0 \ubc84\uc804\uc774 \uc544\ub2cc\ub370\ub3c4 \ud328\ud0a4\uc9c0\ub97c \ucd5c\uc2e0 \ubc84\uc804\uc73c\ub85c \ud45c\uc2dc\ud560 \uc218 \uc788\uc73c\uba70, HTTP \uc751\ub2f5 \ud5e4\ub354\ub294 CDN\uc5d0\uc11c \uc81c\uac70\ub418\uc5b4 \uc0ac\uc6a9\uc790\uc5d0\uac8c \ud45c\uc2dc\ub418\uc9c0 \uc54a\uc744 \uc218\ub3c4 \uc788\uc2b5\ub2c8\ub2e4. \uc800\ud76c \uc0ac\uc774\ud2b8 6\uac1c \uc911 2\uac1c\ub294 \uad00\ub9ac\uc790 \ud654\uba74\uc5d0\uc11c\ub294 \uc815\uc0c1\uc73c\ub85c \ubcf4\uace0\ub418\uc5c8\uc9c0\ub9cc, \uc2e4\uc81c\ub85c\ub294 \ud328\uce58\uac00 \uc801\uc6a9\ub418\uc9c0 \uc54a\uc740 \uc778\ud130\ud504\ub9ac\ud130\ub97c \uc2e4\ud589\ud558\uace0 \uc788\uc5c8\uc2b5\ub2c8\ub2e4.<\/p>\n\n\n\n<h2 id=\"patching-php2shell-on-synology-in-4-steps\" class=\"wp-block-heading\">Synology\uc5d0\uc11c PHP2Shell \ud328\uce58\ud558\ub294 4\ub2e8\uacc4<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">DSM\uc758 \uc6f9 \uc2a4\ud14c\uc774\uc158 \uc0ac\uc774\ud2b8\uc5d0\uc11c PHP2Shell \ubb38\uc81c\ub97c \ud574\uacb0\ud558\ub294 \ubc29\ubc95\uc740 \ud328\ud0a4\uc9c0 \uc13c\ud130 \uc5c5\ub370\uc774\ud2b8\ubfd0\uc785\ub2c8\ub2e4. Synology\ub294 DSM 7.4, 7.3, 7.2\uc6a9 PHP \ubcf4\uc548 \uc5c5\ub370\uc774\ud2b8\ub97c \uc81c\uacf5\ud558\uba70, PHP \ud328\ud0a4\uc9c0 \uc5c5\ub370\uc774\ud2b8 \ud6c4 \uc885\uc18d \ud328\ud0a4\uc9c0\ub4e4\uc774 \uc790\ub3d9\uc73c\ub85c \uc7ac\uc2dc\uc791\ub418\uc5b4 \ubb38\uc81c\uac00 \ud574\uacb0\ub429\ub2c8\ub2e4. \ub2e8, \uba54\uc77c \uc2a4\ud14c\uc774\uc158\uc740 \uc608\uc678\uc801\uc73c\ub85c \uc218\ub3d9 \uc5c5\ub370\uc774\ud2b8\uac00 \ud544\uc694\ud569\ub2c8\ub2e4.<\/p>\n\n\n<div id=\"rank-math-howto\" class=\"rank-math-block\" >\n<div class=\"rank-math-howto-description\">\n\n<\/div>\n\n<div class=\"rank-math-steps\">\n<div id=\"step-1\" class=\"rank-math-step\">\n<h3 class=\"rank-math-step-title\">\uc8fc\uc758\uc0ac\ud56d\uc744 \ud655\uc778\ud558\uc138\uc694<\/h3>\n<div class=\"rank-math-step-content\"><p>Synology-SA-26:14 \ud30c\uc77c\uc744 \uc5f4\uace0 \uc124\uce58\ub41c \ubaa8\ub4e0 PHP \ube0c\ub79c\uce58\uc758 \uc218\uc815\ub41c \ubc84\uc804\uc744 \ud655\uc778\ud558\uc2ed\uc2dc\uc624. \ub300\uc0c1 \ubc84\uc804\uc740 7.4.33-0131, 8.0.30-0122, 8.1.34-0120, 8.2.35-0171, 8.3.36-0051 \ubc0f 8.4.27-0051\uc785\ub2c8\ub2e4. PHP 7.3\uc740 \uc9c0\uc6d0\uc774 \uc885\ub8cc\ub418\uc5c8\uc73c\ubbc0\ub85c \uc218\uc815 \uc0ac\ud56d\uc774 \uc5c6\uc2b5\ub2c8\ub2e4.<\/p>\n<\/div>\n<\/div>\n<div id=\"step-2\" class=\"rank-math-step\">\n<h3 class=\"rank-math-step-title\">\ud328\ud0a4\uc9c0 \uc13c\ud130\ub97c \ud1b5\ud55c \uc5c5\ub370\uc774\ud2b8<\/h3>\n<div class=\"rank-math-step-content\"><p>DSM\uc5d0\uc11c \ud328\ud0a4\uc9c0 \uc13c\ud130\ub97c \uc5f4\uace0 \uc124\uce58\ub41c \ud56d\ubaa9\uc744 \ud655\uc778\ud558\uc138\uc694. \ucde8\uc57d\ud55c PHP \ud328\ud0a4\uc9c0\ub9c8\ub2e4 \uc0c8 \uc628\ub77c\uc778 \ubc84\uc804 \uc5c5\ub370\uc774\ud2b8\uac00 \ud45c\uc2dc\ub429\ub2c8\ub2e4. \ub098\uc5f4\ub41c \ubaa8\ub4e0 PHP \ube0c\ub79c\uce58\uc5d0\uc11c \uc5c5\ub370\uc774\ud2b8\ub97c \ud074\ub9ad\ud558\uace0, Synology \uce98\ub9b0\ub354 \ubc0f \uba54\uc77c \uc2a4\ud14c\uc774\uc158\uc774 \uc124\uce58\ub418\uc5b4 \uc788\ub2e4\uba74 \uc5c5\ub370\uc774\ud2b8\ud558\uc138\uc694.<\/p>\n<\/div>\n<\/div>\n<div id=\"step-3\" class=\"rank-math-step\">\n<h3 class=\"rank-math-step-title\">\ubd80\uc591\uac00\uc871\uc774 \ub2e4\uc2dc \uc2dc\uc791\ud558\ub3c4\ub85d \ud558\uc138\uc694<\/h3>\n<div class=\"rank-math-step-content\"><p>PHP\uc5d0 \uc758\uc874\ud558\ub294 \ud328\ud0a4\uc9c0\ub294 PHP \ud328\ud0a4\uc9c0 \uc5c5\ub370\uc774\ud2b8\uac00 \uc644\ub8cc\ub418\uba74 \uc790\ub3d9\uc73c\ub85c \ub2e4\uc2dc \uc2dc\uc791\ub418\uba70, \uc774 \uc7ac\uc2dc\uc791\uc774 \uc218\uc815 \uc0ac\ud56d\uc744 \uc801\uc6a9\ud558\ub294 \uc5ed\ud560\uc744 \ud569\ub2c8\ub2e4. \ub2e8, Mail Station\uc740 \uc608\uc678\uc801\uc73c\ub85c \ud328\ud0a4\uc9c0 \uc13c\ud130\uc5d0\uc11c \uc218\ub3d9\uc73c\ub85c \uc5c5\ub370\uc774\ud2b8\ud574\uc57c \ud569\ub2c8\ub2e4.<\/p>\n<\/div>\n<\/div>\n<div id=\"step-4\" class=\"rank-math-step\">\n<h3 class=\"rank-math-step-title\">\uc2e4\ud589 \uc911\uc778 \uc778\ud130\ud504\ub9ac\ud130\ub97c \ud655\uc778\ud558\uc2ed\uc2dc\uc624.<\/h3>\n<div class=\"rank-math-step-content\"><p>\ub300\uc2dc\ubcf4\ub4dc\ub97c \uc2e0\ub8b0\ud558\uc9c0 \ub9c8\uc2ed\uc2dc\uc624. \ud328\ud0a4\uc9c0 \uacbd\ub85c \ub610\ub294 \ucee8\ud14c\uc774\ub108 \ub0b4\ubd80\uc5d0\uc11c `php -v` \uba85\ub839\uc744 \uc2e4\ud589\ud558\uc5ec \ube4c\ub4dc \ubc88\ud638\uac00 \uad8c\uace0 \uc0ac\ud56d\uacfc \uc77c\uce58\ud558\ub294\uc9c0 \ud655\uc778\ud558\uc2ed\uc2dc\uc624. \uadf8\ub7f0 \ub2e4\uc74c \ubaa8\ub4e0 \uc6f9 \uc2a4\ud14c\uc774\uc158 \uac00\uc0c1 \ud638\uc2a4\ud2b8\uac00 \uc2e4\uc81c\ub85c \uc5c5\ub370\uc774\ud2b8\ud55c \ud504\ub85c\ud544\uc5d0 \ubc14\uc778\ub529\ub418\uc5b4 \uc788\ub294\uc9c0 \ud655\uc778\ud558\uc2ed\uc2dc\uc624.<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n\n\n\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1400\" height=\"803\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" src=\"https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/php2shell-package-center-php82.webp\" alt=\"Synology \ud328\ud0a4\uc9c0 \uc13c\ud130\uc5d0 PHP 8.2 \uc5c5\ub370\uc774\ud2b8(\ubc84\uc804 8.2.35-0171)\uac00 \uac00\ub2a5\ud558\ub2e4\uace0 \ud45c\uc2dc\ub429\ub2c8\ub2e4.\" class=\"wp-image-22079\" srcset=\"https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/php2shell-package-center-php82.webp 1400w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/php2shell-package-center-php82-300x172.webp 300w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/php2shell-package-center-php82-1024x587.webp 1024w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/php2shell-package-center-php82-768x441.webp 768w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/php2shell-package-center-php82-18x10.webp 18w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/php2shell-package-center-php82-600x344.webp 600w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/php2shell-package-center-php82-400x229.webp 400w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/php2shell-package-center-php82-1000x574.webp 1000w\" \/><figcaption class=\"wp-element-caption\">\ud328\ud0a4\uc9c0 \uc13c\ud130\uc5d0\uc11c PHP 8.2.35-0171 \ubc84\uc804\uc744 \uc81c\uacf5\ud558\uace0 \uc788\uc73c\uba70, \uc774\ub294 \uacf5\uc9c0\uc0ac\ud56d\uc5d0 \uba85\uc2dc\ub41c \ube4c\ub4dc \ubc84\uc804\uc785\ub2c8\ub2e4.<\/figcaption><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">\uc704 \uc2a4\ud06c\ub9b0\uc0f7\uc740 PHP2Shell \uad8c\uace0 \ubc1c\ud45c \ub2e4\uc74c \ub0a0 \uc544\uce68 \uc800\ud76c \uc2dc\uc2a4\ud15c \uc911 \ud558\ub098\uc5d0\uc11c \ucea1\ucc98\ud55c \uac83\uc785\ub2c8\ub2e4. &#039;\uc0c8\ub85c\uc6b4 \uae30\ub2a5&#039; \ud328\ub110\uc5d0 \uc5c5\uc2a4\ud2b8\ub9bc \ubc84\uc804\uc774 \uc9c1\uc811 \ud45c\uc2dc\ub418\ubbc0\ub85c Synology \ube4c\ub4dc \uc811\ubbf8\uc0ac\ub97c PHP \ub9b4\ub9ac\uc2a4 \ubc84\uc804\uacfc \ub300\uc870\ud558\uc5ec \uc27d\uac8c \ud655\uc778\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. Synology \uce98\ub9b0\ub354\ub294 \ub3d9\uc77c\ud55c \uc5c5\ub370\uc774\ud2b8 \ubaa9\ub85d\uc5d0 3.0.4-21435 \ubc84\uc804\uc73c\ub85c \ub098\ud0c0\ub098\ub294\ub370, \uc774\ub294 \uad8c\uace0\uc5d0\uc11c \uc694\uad6c\ud558\ub294 \ubc84\uc804\uacfc \uc815\ud655\ud788 \uc77c\uce58\ud569\ub2c8\ub2e4.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1400\" height=\"793\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" src=\"https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/php2shell-package-center-update.webp\" alt=\"Synology \ud328\ud0a4\uc9c0 \uc13c\ud130 \uc124\uc815 \ud655\uc778 \ub300\ud654 \uc0c1\uc790 PHP 8.2\ub97c 8.2.35-0171\ub85c \uc5c5\ub370\uc774\ud2b8 \uc911\" class=\"wp-image-22080\" srcset=\"https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/php2shell-package-center-update.webp 1400w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/php2shell-package-center-update-300x170.webp 300w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/php2shell-package-center-update-1024x580.webp 1024w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/php2shell-package-center-update-768x435.webp 768w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/php2shell-package-center-update-18x10.webp 18w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/php2shell-package-center-update-600x340.webp 600w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/php2shell-package-center-update-400x227.webp 400w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/php2shell-package-center-update-1000x566.webp 1000w\" \/><figcaption class=\"wp-element-caption\">Synology Inc.\uc5d0\uc11c \uac8c\uc2dc\ud55c PHP 8.2.35-0171 \uc5c5\ub370\uc774\ud2b8 \ub300\ud654 \uc0c1\uc790\uc785\ub2c8\ub2e4.<\/figcaption><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">\uc6f9 \uc2a4\ud14c\uc774\uc158 \uc0ac\uc6a9\uc790\ub97c \uc704\ud55c PHP2Shell\uc758 \ud568\uc815 \ud558\ub098\ub97c \uc54c\ub824\ub4dc\ub9ac\uaca0\uc2b5\ub2c8\ub2e4. DSM \uba38\uc2e0\uc5d0\ub294 \uc5ec\ub7ec PHP \ube0c\ub79c\uce58\uac00 \ub3d9\uc2dc\uc5d0 \uc124\uce58\ub420 \uc218 \uc788\uc73c\uba70, \uac01 \uac00\uc0c1 \ud638\uc2a4\ud2b8\ub294 \ud558\ub098\uc758 \ud504\ub85c\ud544\uc5d0 \ubc14\uc778\ub529\ub429\ub2c8\ub2e4. \uae30\ubcf8 \ud504\ub85c\ud544\uc744 \uc5c5\ub370\uc774\ud2b8\ud574\ub3c4 \ub2e4\ub978 \ube0c\ub79c\uce58\uc5d0 \uace0\uc815\ub41c \uc0ac\uc774\ud2b8\uc5d0\ub294 \uc801\uc6a9\ub418\uc9c0 \uc54a\uc2b5\ub2c8\ub2e4. \uba3c\uc800 \ud504\ub85c\ud544 \ubaa9\ub85d\uc744 \ud655\uc778\ud558\uace0 \ubaa8\ub450 \uc5c5\ub370\uc774\ud2b8\ud55c \ub2e4\uc74c, \uc6f9 \uc11c\ube44\uc2a4\uc5d0\uc11c \uac01 \uc0ac\uc774\ud2b8\uc758 \ubc14\uc778\ub529 \uc0c1\ud0dc\ub97c \ud655\uc778\ud558\uc2ed\uc2dc\uc624.<\/p>\n\n\n\n<h2 id=\"which-dsm-packages-are-affected\" class=\"wp-block-heading\">\uc5b4\ub5a4 DSM \ud328\ud0a4\uc9c0\uac00 \uc601\ud5a5\uc744 \ubc1b\ub098\uc694?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">PHP2Shell\uc758 Synology \uc624\ub958 \uba54\uc2dc\uc9c0\ub294 \ud328\ub2c9 \uba54\uc2dc\uc9c0\uc5d0\uc11c \uc81c\uc2dc\ub41c \uac83\ubcf4\ub2e4 \ubc94\uc704\uac00 \uc881\uc2b5\ub2c8\ub2e4. \ud2b9\uc815 PHP \uc885\uc18d \ud328\ud0a4\uc9c0\ub97c \uc2e4\ud589\ud558\ub294 \uc2dc\uc2a4\ud15c\uc5d0\ub9cc \uc601\ud5a5\uc744 \ubbf8\uce58\uba70, Synology Drive\ub294 \uba85\uc2dc\uc801\uc73c\ub85c \ud574\ub2f9 \ud328\ud0a4\uc9c0\uc5d0 \ud3ec\ud568\ub418\uc9c0 \uc54a\uc2b5\ub2c8\ub2e4. IDrive\ub294 \ubaa9\ub85d\uc5d0 \uc788\uc9c0\ub9cc \ud0c0\uc0ac \uc18c\ud504\ud2b8\uc6e8\uc5b4\uc785\ub2c8\ub2e4.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>\uc6f9\uc5d0\uc11c \ubc14\ub85c \uc0ac\uc6a9 \uac00\ub2a5\ud558\uba70 \ucd5c\uc6b0\uc120 \uc21c\uc704\uc785\ub2c8\ub2e4.<\/strong> Web Station, WordPress, Joomla, MediaWiki, vtigerCRM, KodExplorer \ubc0f phpMyAdmin\uc740 \uc811\uadfc \uad8c\ud55c\uc774 \uc788\ub294 \ubaa8\ub4e0 \uc0ac\uc6a9\uc790\uc5d0\uac8c PHP\ub97c \uc81c\uacf5\ud569\ub2c8\ub2e4.<\/li>\n\n\n\n<li><strong>\uba54\uc77c\uacfc \uce98\ub9b0\ub354.<\/strong> PHP \ud328\ud0a4\uc9c0 \uc124\uce58 \ud6c4 Mail Station\uc744 \uc218\ub3d9\uc73c\ub85c \uc5c5\ub370\uc774\ud2b8\ud574\uc57c \ud569\ub2c8\ub2e4. Synology \uce98\ub9b0\ub354\ub294 3.0.4-21435 \ubc84\uc804\uc5d0\uc11c \uc790\uccb4\uc801\uc73c\ub85c \uc218\uc815\ub41c \ube4c\ub4dc\ub97c \uc81c\uacf5\ud569\ub2c8\ub2e4.<\/li>\n\n\n\n<li><strong>DSM \ub0b4\ubd80 \uad6c\uc131 \uc694\uc18c.<\/strong> \uc874\uc7ac\ud558\uc9c0\ub9cc \uc678\ubd80\uc5d0\uc11c \uc811\uadfc\ud560 \uc218 \uc5c6\uc73c\uba70, \ud328\uce58\ub294 \ucd94\ud6c4 DSM \ub9b4\ub9ac\uc2a4\ub85c \uc5f0\uae30\ub418\uc5c8\uace0, Synology\ub294 \uc704\ud5d8\ub3c4\ub97c \ucd5c\uc18c\ub85c \ud3c9\uac00\ud588\uc2b5\ub2c8\ub2e4.<\/li>\n\n\n\n<li><strong>\ucee8\ud14c\uc774\ub108\ub294 \ub36e\uc5ec \uc788\uc9c0 \uc54a\uc2b5\ub2c8\ub2e4.<\/strong> \ucee8\ud14c\uc774\ub108 \uad00\ub9ac\uc790 \ub0b4\uc758 PHP \ub7f0\ud0c0\uc784\uc740 \uc0ac\uc6a9\uc790\uac00 \uc9c1\uc811 \ud328\uce58\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \ud328\ud0a4\uc9c0 \uc5c5\ub370\uc774\ud2b8\ub294 \uc774\ub97c \uac74\ub4dc\ub9ac\uc9c0 \uc54a\ub294\ub370, \uc774\uac83\uc774 NAS \uc0ac\uc6a9\uc790\uac00 \ud328\uce58\uac00 \uc644\ub8cc\ub418\uc5c8\ub2e4\uace0 \ucc29\uac01\ud558\ub294 \uac00\uc7a5 \ud754\ud55c \uc774\uc720\uc785\ub2c8\ub2e4.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">DSM 7.2 \uc774\uc804 \ubc84\uc804\uc744 \uc0ac\uc6a9 \uc911\uc778 \uacbd\uc6b0, Synology\ub294 \ud328\uce58\ub41c \ubc84\uc804\uc774 \ub098\uc62c \ub54c\uae4c\uc9c0 \ud574\ub2f9 \ud328\ud0a4\uc9c0\ub97c \uc77c\uc2dc\uc801\uc73c\ub85c \ube44\ud65c\uc131\ud654\ud560 \uac83\uc744 \uad8c\uc7a5\ud569\ub2c8\ub2e4. DSM 7.2\ub294 \uc774\ub7ec\ud55c PHP \uc5c5\ub370\uc774\ud2b8\ub97c \ubc1b\uc558\uc74c\uc5d0\ub3c4 \ubd88\uad6c\ud558\uace0 \ud574\ub2f9 \uacf5\uc9c0\uc5d0\uc11c \uc9c0\uc6d0 \uc885\ub8cc(End of Life)\ub85c \ud45c\uc2dc\ub418\uc5b4 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">PHP2Shell\uc758 \uac00\uc7a5 \ud070 \ubb38\uc81c\ub294 PHP 7.3 \uc774\ud558 \ubc84\uc804\uc785\ub2c8\ub2e4. Synology\ub294 \ud574\ub2f9 \ube0c\ub79c\uce58\uac00 \uc9c0\uc6d0 \uc885\ub8cc\ub418\uc5c8\uace0, \uc5c5\uc2a4\ud2b8\ub9bc\uc5d0\uc11c\ub3c4 7.3 \uc774\ud558 \ubc84\uc804\uc5d0 \ub300\ud55c \uc5c5\ub370\uc774\ud2b8\ub97c \uc804\ud600 \uc81c\uacf5\ud558\uc9c0 \uc54a\uc558\uae30 \ub54c\ubb38\uc5d0 7.3 \ubc84\uc804\uc744 \uc9c0\uc6d0\ud558\uc9c0 \uc54a\uc2b5\ub2c8\ub2e4. \ub9ac\ub205\uc2a4 \ubc30\ud3ec\ud310\uc5d0\uc11c\ub294 \uc77c\ubd80 \uad6c\ubc84\uc804\uc5d0 \ub300\ud55c \ubc31\ud3ec\ud2b8\ub97c \uc81c\uacf5\ud558\uae30\ub3c4 \ud558\uc9c0\ub9cc, Synology PHP \ud328\ud0a4\uc9c0\ub294 \ubc30\ud3ec\ud310 \ud328\ud0a4\uc9c0\uac00 \uc544\ub2d9\ub2c8\ub2e4. \uc6f9\uc0ac\uc774\ud2b8 \uc6b4\uc601\uc5d0 7.3 \ub610\ub294 5.6 \ubc84\uc804\uc774 \ud544\uc694\ud55c \uacbd\uc6b0, \ud328\uce58\ub294 \uc81c\uacf5\ub418\uc9c0 \uc54a\uc73c\ubbc0\ub85c \uc0ac\uc774\ud2b8\ub97c \uc9c0\uc6d0\ub418\ub294 \ube0c\ub79c\uce58\ub85c \uc774\uc804\ud558\uac70\ub098, \uc6f9 \ubc29\ud654\ubcbd(WAF) \ub4a4\uc5d0 \uc228\uae30\uac70\ub098, \uc778\ud130\ub137\uc5d0\uc11c \uc644\uc804\ud788 \ucc28\ub2e8\ud558\ub294 \uac83\uc774 \ucd5c\uc120\uc758 \uc120\ud0dd\uc785\ub2c8\ub2e4.<\/p>\n\n\n\n<h2 id=\"how-container-site-owners-handle-php2shell\" class=\"wp-block-heading\">\ucee8\ud14c\uc774\ub108 \uc0ac\uc774\ud2b8 \uc18c\uc720\uc790\ub294 PHP2Shell\uc744 \uc5b4\ub5bb\uac8c \ucc98\ub9ac\ud560\uae4c\uc694?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\uc800\ud76c \uc0ac\uc774\ud2b8 6\uac1c \uc911 5\uac1c\ub294 \uc6f9 \uc2a4\ud14c\uc774\uc158\uc774 \uc544\ub2cc \ub3c4\ucee4\uc5d0\uc11c WordPress\ub97c \uc2e4\ud589\ud558\uace0 \uc788\ub294\ub370, \ubc14\ub85c \uc774 \ubd80\ubd84\uc5d0\uc11c PHP2Shell\uc774 \uc720\uc6a9\ud574\uc9d1\ub2c8\ub2e4. \ud328\ud0a4\uc9c0 \uc13c\ud130\ub85c\ub294 \ud574\uacb0\ud560 \uc218 \uc5c6\uae30 \ub54c\ubb38\uc785\ub2c8\ub2e4. \ub7f0\ud0c0\uc784\uc740 \uc774\ubbf8\uc9c0\uc5d0 \ud3ec\ud568\ub41c \ub0b4\uc6a9\uc5d0 \ub530\ub77c \ub2ec\ub77c\uc9c0\uba70, \uc774\ubbf8\uc9c0\ub97c \ub2e4\uc2dc \ube4c\ub4dc\ud558\ub294 \uac83\uacfc \uc5c5\ub370\uc774\ud2b8\ud558\ub294 \uac83\uc740 \ub2e4\ub985\ub2c8\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\uc6b0\ub9ac\uac00 \ucc98\uc74c \ubc1c\uacac\ud588\uace0, \ub2e4\ub978 \uc0ac\ub78c\ub4e4\ub3c4 \uacaa\uc744 \uac00\ub2a5\uc131\uc774 \uac00\uc7a5 \ub192\uc740 PHP2Shell \uc624\ub958\ub294 \uc0ac\uc6a9\uc790 \uc815\uc758 \uc774\ubbf8\uc9c0\ub97c \ub2e4\uc2dc \ube4c\ub4dc\ud560 \ub54c \uce90\uc2dc\ub41c \uae30\ubcf8 \ub808\uc774\uc5b4\ub97c \uc7ac\uc0ac\uc6a9\ud55c\ub2e4\ub294 \uc810\uc785\ub2c8\ub2e4. \uace0\uc815\ub418\uc9c0 \uc54a\uc740 \ub808\uc774\uc5b4\ub294 \uc774\ub7ec\ud55c \ubb38\uc81c\ub97c \uc57c\uae30\ud569\ub2c8\ub2e4. <code>\uc5d0\uc11c<\/code> \ud0dc\uadf8\uac00 \ucd5c\uc2e0 \ubc84\uc804\uc784\uc744 \uc758\ubbf8\ud558\ub294 \uac83\uc740 \uc544\ub2d9\ub2c8\ub2e4. \uc800\ud76c \uc774\ubbf8\uc9c0 \uc911 \ud558\ub098\ub294 4\uc77c \uc804\uc5d0 \uc7ac\uad6c\ucd95\ub418\uc5c8\uc9c0\ub9cc, Docker\uac00 \uae30\ubcf8 \uc774\ubbf8\uc9c0\ub97c \ub2e4\uc2dc \uac00\uc838\uc624\ub3c4\ub85d \uac15\uc81c\ud558\ub294 \uc694\uc18c\uac00 \uc5c6\uc5c8\uae30 \ub54c\ubb38\uc5d0 2025\ub144 7\uc6d4\uc758 PHP \ube4c\ub4dc\ub97c \uc5ec\uc804\ud788 \ud3ec\ud568\ud558\uace0 \uc788\uc5c8\uc2b5\ub2c8\ub2e4. \uc774\ub294 1\ub144 \uc774\uc0c1 \uc9c0\ub09c \ubcf4\uc548 \uc218\uc815 \uc0ac\ud56d\ub4e4\uc774 \ubc18\uc601\ub41c \uac83\uc785\ub2c8\ub2e4.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>\uc798\ubabb\ub41c \uc608: \ub85c\uceec\uc5d0 \uce90\uc2dc\ub41c \uae30\ubcf8 \ub808\uc774\uc5b4\ub97c \uc790\ub3d9\uc73c\ub85c \uc7ac\uc0ac\uc6a9\ud569\ub2c8\ub2e4. `docker build -t mysite .` \uc62c\ubc14\ub978 \uc608: \ud56d\uc0c1 \uae30\ubcf8 \uc774\ubbf8\uc9c0\ub97c \ub2e4\uc2dc \uac00\uc838\uc635\ub2c8\ub2e4. `docker build --pull -t mysite .` \uadf8\ub7f0 \ub2e4\uc74c, \ube44\ud65c\uc131\ud654\ub41c \ub2e4\ub978 \uc11c\ube44\uc2a4\ub294 \uc2dc\uc791\ud558\uc9c0 \uc54a\uace0 \ud544\uc694\ud55c \uc11c\ube44\uc2a4\ub9cc \uc2e4\ud589\ud569\ub2c8\ub2e4. `docker compose up -d --no-deps wordpress` \ub9c8\uc9c0\ub9c9\uc73c\ub85c, \uc2e4\uc81c\ub85c \uc911\uc694\ud55c \ubd80\ubd84\uc744 \ud655\uc778\ud569\ub2c8\ub2e4. `docker exec wordpress php -v`<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\ub450 \ubc88\uc9f8 PHP2Shell \uc624\ub958\ub294 \uc131\uacf5\uc73c\ub85c \ubcf4\uace0\ub418\uae30 \ub54c\ubb38\uc5d0 \ub354 \uc2ec\uac01\ud569\ub2c8\ub2e4. \ube4c\ub4dc \ucd9c\ub825\uc744 \ud30c\uc774\ud551\ud558\ub294 \uacfc\uc815\uc5d0\uc11c \ubb38\uc81c\uac00 \ubc1c\uc0dd\ud588\uc2b5\ub2c8\ub2e4. <code>\uaf2c\ub9ac<\/code> \ud30c\uc774\ud504\ub77c\uc778\uc758 \uc885\ub8cc \ucf54\ub4dc\ub294 \ud574\ub2f9 \ud30c\uc774\ud504\ub77c\uc778\uc758 \ub9c8\uc9c0\ub9c9 \uba85\ub839\uc5d0 \uc18d\ud558\uae30 \ub54c\ubb38\uc5d0 \ube4c\ub4dc \uc2e4\ud328\ub97c \uc228\uae41\ub2c8\ub2e4. <code>\uc124\uc815 -e<\/code> \uc774 \uc791\uc5c5\uc740 \uc804\ud600 \uc2e4\ud589\ub418\uc9c0 \uc54a\uc2b5\ub2c8\ub2e4. \uadf8\ub7ec\uba74 \uad6c\uc131 \ub2e8\uacc4\uc5d0\uc11c \uc774\uc804 \uc774\ubbf8\uc9c0\ub85c\ubd80\ud130 \ucee8\ud14c\uc774\ub108\ub97c \ub2e4\uc2dc \uc0dd\uc131\ud558\uace0 &quot;\uc2dc\uc791\ub428&quot;\uc744 \ucd9c\ub825\ud558\uba70, \ud328\uce58\uac00 \uc801\uc6a9\ub418\uc9c0 \uc54a\uc740 \ucc44 \uc0c8\ub85c \ubc30\ud3ec\ub41c \uac83\ucc98\ub7fc \ubcf4\uc774\ub294 \uc0ac\uc774\ud2b8\ub97c \ud655\uc778\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \ube4c\ub4dc \uacb0\uacfc\ub97c \ub2e8\ub3c5\uc73c\ub85c \ud655\uc778\ud558\uace0, \ub2e4\uc74c \uba85\ub839\uc73c\ub85c \uac80\uc99d\ud558\uc2ed\uc2dc\uc624. <code>php -v<\/code> \ub098\uc911\uc5d0.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\ub450 \uac00\uc9c0 \uc791\uc740 \ucc38\uace0 \uc0ac\ud56d\uc774 \uc788\uc2b5\ub2c8\ub2e4. \uc774\ubbf8\uc9c0\ub97c \ub2e4\uc2dc \ube4c\ub4dc\ud558\uae30 \uc804\uc5d0 \uc774\uc804 \uc774\ubbf8\uc9c0\uc5d0 \ud0dc\uadf8\ub97c \uc9c0\uc815\ud558\uc138\uc694. \uc774\ubbf8\uc9c0\ub294 \ud0dc\uadf8\ub97c \uc720\uc9c0\ud558\ubbc0\ub85c \uc2a4\ub0c5\uc0f7\ubcf4\ub2e4 \ud6e8\uc52c \uc800\ub834\ud55c \ube44\uc6a9\uc73c\ub85c \ub864\ubc31\ud560 \uc218 \uc788\ub294 \uc9c0\uc810\uc744 \uc81c\uacf5\ud569\ub2c8\ub2e4. \ub610\ud55c \uc774\ubbf8\uc9c0 \uc5c5\ub370\uc774\ud2b8\ub97c \ud1b5\ud574 \uc560\ud50c\ub9ac\ucf00\uc774\uc158\uc774 \uc5c5\uadf8\ub808\uc774\ub4dc\ub420 \uac83\uc774\ub77c\uace0 \uae30\ub300\ud558\uc9c0 \ub9c8\uc138\uc694. \uacf5\uc2dd WordPress \uc774\ubbf8\uc9c0 \uc9c4\uc785\uc810\uc740 \ubb38\uc11c \ub8e8\ud2b8\uac00 \ube44\uc5b4 \uc788\uc744 \ub54c\ub9cc \ud575\uc2ec \ud30c\uc77c\uc744 \ubcf5\uc0ac\ud558\ubbc0\ub85c, \ucd5c\uc2e0 \uc774\ubbf8\uc9c0\uc5d0\uc11c \ucee8\ud14c\uc774\ub108\ub97c \ub2e4\uc2dc \uc0dd\uc131\ud574\ub3c4 \uae30\uc874 \uc124\uce58\ub294 \uc774\uc804 \uc0c1\ud0dc \uadf8\ub300\ub85c \uc720\uc9c0\ub429\ub2c8\ub2e4. \ud504\ub85c\ub355\uc158 \ud658\uacbd\uc5d0 \uc801\uc6a9\ud558\uae30 \uc804\uc5d0 \uc2a4\ud14c\uc774\uc9d5 \ud658\uacbd\uc5d0\uc11c \uc774\ub97c \ud655\uc778\ud588\uc73c\uba70 WordPress \ubc84\uc804\uc740 \ubcc0\uacbd\ub418\uc9c0 \uc54a\uc558\uc2b5\ub2c8\ub2e4.<\/p>\n\n\n\n<h2 id=\"why-disabling-upload-progress-only-covers-half\" class=\"wp-block-heading\">session.upload_progress\ub97c \ube44\ud65c\uc131\ud654\ud574\ub3c4 \ubb38\uc81c\uac00 \uc808\ubc18\ub9cc \ud574\uacb0\ub418\ub294 \uc774\uc720\ub294 \ubb34\uc5c7\uc77c\uae4c\uc694?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\ud328\uce58\uac00 \ubd88\uac00\ub2a5\ud55c \uc2dc\uc2a4\ud15c\uc5d0 \ub300\ud574 \uc720\ud3ec\ub418\uace0 \uc788\ub294 PHP2Shell \uc644\ud654 \ubc29\ubc95\uc740 \ub2e4\uc74c\uacfc \uac19\uc2b5\ub2c8\ub2e4. <code>session.upload_progress.enabled = 0<\/code>, DSM\uc5d0\uc11c\ub294 \uc6f9 \uc2a4\ud14c\uc774\uc158\uc758 \uc2a4\ud06c\ub9bd\ud2b8 \uc5b8\uc5b4 \uc124\uc815\uc5d0\uc11c PHP \ud504\ub85c\ud544\uc758 \ucf54\uc5b4 \ud0ed\uc5d0 \ud574\ub2f9 \uc124\uc815\uc774 \uc788\uc2b5\ub2c8\ub2e4. \uc774 \uc791\uc5c5\uc744 \uc218\ud589\ud558\ub294 \uac83\uc774 \uc88b\uc2b5\ub2c8\ub2e4. \uc644\ubcbd\ud55c \ud574\uacb0\ucc45\uc740 \uc544\ub2c8\uc9c0\ub9cc, \uc774 \uaca9\ucc28\ub294 \uc911\uc694\ud569\ub2c8\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\uc138\uc158 \uc5c5\ub85c\ub4dc \uc9c4\ud589\ub960 \uacbd\ub85c\ub294 \ucde8\uc57d\uc810 \ubc1c\uc0dd \uacbd\ub85c \uc911 \ud558\ub098\uc77c \ubfd0\uc785\ub2c8\ub2e4. \uba54\ubaa8\ub9ac \ub178\ucd9c \ubcc0\ud615\uc740 \uc77c\ubc18\uc801\uc778 \uba40\ud2f0\ud30c\ud2b8 \uc694\uccad \ucc98\ub9ac\ub97c \ud1b5\ud574 \ubc1c\uc0dd\ud558\uba70 \uc138\uc158 \uae30\ub2a5\uc744 \uc804\ud600 \ud544\uc694\ub85c \ud558\uc9c0 \uc54a\uc73c\ubbc0\ub85c, \ud574\ub2f9 \uae30\ub2a5\uc744 \ube44\ud65c\uc131\ud654\ud574\ub3c4 \ud574\ub2f9 \uacbd\ub85c\ub294 \uc5ec\uc804\ud788 \uc5f4\ub824 \uc788\uc2b5\ub2c8\ub2e4. PHP \ud504\ub85c\uc81d\ud2b8 \uce21\uc5d0\uc11c\ub294 \uc644\ubcbd\ud55c \uc644\ud654\ucc45\uc774 \uc5c6\uc73c\uba70 \uc5c5\ub370\uc774\ud2b8\ub9cc\uc774 \uc720\uc77c\ud55c \uc548\uc804\ud55c \ud574\uacb0\ucc45\uc774\ub77c\uace0 \uc9c1\uc811 \ubc1d\ud614\uc2b5\ub2c8\ub2e4. Imunify360\uc5d0 \ub530\ub974\uba74 \ud604\uc7ac CVE-2026-109618\uc758 \uba54\ubaa8\ub9ac \ubd80\uc871 \uacbd\ub85c\ub97c \ucc28\ub2e8\ud558\ub294 \uaddc\uce59\uc740 \uc5c6\uc73c\uba70, Elastic\uc740 \uc5c5\ub85c\ub4dc \uc9c4\ud589\ub960 \uc124\uc815\uc774 \ud655\uc778\ub41c \uc138\uc158 \uacbd\ub85c\ub294 \ucc28\ub2e8\ud558\uc9c0\ub9cc \ubaa8\ub4e0 \ubcc0\ud615\uc744 \ucc28\ub2e8\ud558\ub294 \uac83\uc740 \uc544\ub2c8\ub77c\uace0 \uc9c0\uc801\ud569\ub2c8\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\ub610\ud55c \ubcf4\uac8c \ub420 \uac83\uc785\ub2c8\ub2e4 <code>\uba54\ubaa8\ub9ac \uc81c\ud55c = -1<\/code> \ubc84\uadf8\uac00 \uba54\ubaa8\ub9ac \ubd80\uc871 \uc0c1\ud0dc\ub97c \ud1b5\ud574 \ubc1c\uc0dd\ud55c\ub2e4\ub294 \ub17c\ub9ac\uc5d0 \uadfc\uac70\ud558\uc5ec \uc81c\uc548\ub41c \ub0b4\uc6a9\uc785\ub2c8\ub2e4. \uc774\ub294 \uc774\ub4dd\uc774 \uc544\ub2c8\ub77c \uc77c\uc885\uc758 \uac70\ub798\ub85c \ubd10\uc57c \ud569\ub2c8\ub2e4. \uacf5\uc6a9 \uc6f9 \uc11c\ubc84\uc5d0\uc11c \uba54\ubaa8\ub9ac \uc81c\ud55c\uc744 \uc81c\uac70\ud558\uba74 \ud55c \uac00\uc9c0 \uc624\ub958 \uc720\ud615\uc774 \ub2e4\ub978 \uc720\ud615\uc73c\ub85c \ubc14\ub00c\uace0, \uacf5\uc720 \uba54\ubaa8\ub9ac \uc608\uc0b0\uc744 \uc0ac\uc6a9\ud558\ub294 NAS\uc5d0\uc11c\ub294 \uc791\uc5c5\uc790 \ud480\uc774 \uc804\uccb4 \uc2dc\uc2a4\ud15c\uc758 \uba54\ubaa8\ub9ac\ub97c \uace0\uac08\uc2dc\ud0a4\ub3c4\ub85d \uc720\ub3c4\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\uc5e3\uc9c0 \ud544\ud130\ub9c1\uc740 PHP2Shell\uc5d0\uc11c \uc2e4\uc81c\ub85c \uc911\uc694\ud55c \uc5ed\ud560\uc744 \ud558\ub294 \uacc4\uce35\uc785\ub2c8\ub2e4. \ub77c\uc6b0\ud130\ub294 \ubcf5\ud638\ud654\ub41c \ud2b8\ub798\ud53d\uc744 \ubcfc \uc218 \uc5c6\uc9c0\ub9cc \uc5e3\uc9c0 \ud544\ud130\ub9c1\uc740 \ubcf5\ud638\ud654\ub41c \ud2b8\ub798\ud53d\uc744 \ubcfc \uc218 \uc788\uae30 \ub54c\ubb38\uc785\ub2c8\ub2e4. Cloudflare\ub294 PHP2Shell\uc5d0 \ub300\ud55c \uad00\ub9ac\ud615 \uaddc\uce59 \ubcf4\ud638 \uae30\ub2a5\uc744 \ubc30\ud3ec\ud588\uace0, AWS\ub294 PHP \uad00\ub9ac\ud615 \uaddc\uce59 \uadf8\ub8f9 \ubc84\uc804 2.3\uc5d0 CVE-2026-109619 \uad00\ub828 \ub0b4\uc6a9\uc744 \ucd94\uac00\ud588\uc73c\uba70, Azure Front Door\ub294 \uae30\ubcf8\uc801\uc73c\ub85c \ube44\ud65c\uc131\ud654\ub41c \uaddc\uce59 99006001\uc744 \uc81c\uacf5\ud588\uc2b5\ub2c8\ub2e4. GitHub\uc5d0\ub294 \ucee4\ubba4\ub2c8\ud2f0\uc5d0\uc11c \ub9cc\ub4e0 Snort \ubc0f Suricata \uaddc\uce59\uc774 \uc788\uc9c0\ub9cc, \uc774 \uae00\uc744 \uc791\uc131\ud558\ub294 \uc2dc\uc810\uc5d0\ub294 \uacf5\uc2dd Snort \ubc0f Emerging Threats \uaddc\uce59 \uc138\ud2b8\uc5d0 \uad00\ub828 \ub0b4\uc6a9\uc774 \uac8c\uc2dc\ub418\uc9c0 \uc54a\uc558\uc73c\ubbc0\ub85c NAS \uce68\uc785 \ubc29\uc9c0 \uae30\ub2a5\uc740 \uc774 \ubb38\uc81c\ub97c \ud574\uacb0\ud574 \uc8fc\uc9c0 \ubabb\ud560 \uac83\uc785\ub2c8\ub2e4. \uc5b4\ucc28\ud53c NAS\ub294 TLS \ub0b4\ubd80\ub97c \uc77d\uc744 \uc218 \uc5c6\uae30 \ub54c\ubb38\uc785\ub2c8\ub2e4.<\/p>\n\n\n\n<h2 id=\"which-nas-vendor-actually-shipped-a-fix\" class=\"wp-block-heading\">\uc5b4\ub290 NAS \uacf5\uae09\uc5c5\uccb4\uac00 \uc2e4\uc81c\ub85c \uc218\uc815 \uc0ac\ud56d\uc744 \ubc30\ud3ec\ud588\uc2b5\ub2c8\uae4c?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">PHP2Shell \uad00\ub828 \uc774\uc57c\uae30 \uc911 \uad6c\ub9e4 \uacb0\uc815\uc744 \uc88c\uc6b0\ud574\uc57c \ud560 \ubd80\ubd84\uc740 \ubc14\ub85c \uc774 \ubd80\ubd84\uc785\ub2c8\ub2e4. PHP \uc5c5\uc2a4\ud2b8\ub9bc\uc740 10\uc6d4 21\uc77c\uc5d0 \ub9b4\ub9ac\uc2a4\ub418\uc5c8\uc2b5\ub2c8\ub2e4. \ub2e4\uc74c\uc740 \uc5b8\ub860 \ubcf4\ub3c4\uac00 \uc544\ub2cc \uac01 \ud68c\uc0ac\uc758 \uacf5\uc9c0 \ud398\uc774\uc9c0\uc5d0\uc11c \ubc1c\ucdcc\ud55c, \uc8fc\uc694 \uc18c\ube44\uc790 \ubc0f \uc804\ubb38\uac00\uc6a9 NAS \uc81c\uc870\uc0ac 4\uacf3\uc758 \ub2e4\uc74c \ub0a0 \uc0c1\ud669\uc785\ub2c8\ub2e4.<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><thead><tr><th>\uacf5\uae09\uc5c5\uccb4<\/th><th>\uc790\ubb38<\/th><th>\uc0c1\ud0dc<\/th><th>\uc218\uc815\ub41c \ubc84\uc804\uc774 \uac8c\uc2dc\ub418\uc5c8\uc2b5\ub2c8\ub2e4.<\/th><\/tr><\/thead><tbody><tr><td><strong>Synology<\/strong><\/td><td>Synology-SA-26:14, 2026\ub144 10\uc6d4 22\uc77c<\/td><td><strong>\ud574\uacb0\ub428<\/strong><\/td><td>\ub124. PHP 7.4\ubd80\ud130 8.4\uae4c\uc9c0\uc758 \ubaa8\ub4e0 \uc9c0\uc810\uacfc \uce98\ub9b0\ub354 \ubc0f \uba54\uc77c \uc2a4\ud14c\uc774\uc158\uc774 \ud3ec\ud568\ub429\ub2c8\ub2e4.<\/td><\/tr><tr><td>\ud050\ub0c5<\/td><td>QSA-26-18, 2026\ub144 10\uc6d4 22\uc77c<\/td><td>\uace0\uc815<\/td><td>\uc544\ub2c8\uc694. \ubaa8\ub4e0 \uc904\uc5d0 &quot;\ucd94\ud6c4 \uacf5\uc9c0 \uc608\uc815&quot;\uc774\ub77c\uace0 \uc801\ud600 \uc788\uc2b5\ub2c8\ub2e4.<\/td><\/tr><tr><td>ASUSTOR<\/td><td>\uae30\uc874 PHP \uc11c\ube44\uc2a4 \uc885\ub8cc\uc77c: 2026\ub144 10\uc6d4 22\uc77c<\/td><td>\uc740\ud1f4\uc774\uc9c0, \uc784\uc2dc\ubc29\ud3b8\uc774 \uc544\ub2d9\ub2c8\ub2e4.<\/td><td>\uc544\ub2c8\uc694, PHP 7, 7.3, 7.4 \ubc0f 8.1 \ubc84\uc804\uc774 \uc571 \uc13c\ud2b8\ub7f4\uc5d0\uc11c \uc81c\uac70\ub418\uc5c8\uc2b5\ub2c8\ub2e4.<\/td><\/tr><tr><td>\uc720\uadf8\ub9b0<\/td><td>\ucc3e\uc744 \uc218 \uc5c6\uc74c<\/td><td>\uc54c\ub824\uc9c0\uc9c0 \uc54a\uc740<\/td><td>UGOS Pro\uc5d0 \ub300\ud55c \uad8c\uace0\uc0ac\ud56d\uc744 \ucc3e\uc744 \uc218 \uc5c6\uc2b5\ub2c8\ub2e4.<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Synology\ub294 \uad8c\uace0\uc548 \ubc1c\ud45c \ub2f9\uc77c PHP2Shell \ubc84\uc804 \ud45c \uc804\uccb4\ub97c \uac8c\uc2dc\ud558\uace0 \uad8c\uace0\uc548\uc744 \ud574\uacb0\ub428\uc73c\ub85c \ud45c\uc2dc\ud588\uc2b5\ub2c8\ub2e4. DSM \ub2f4\ub2f9\uc790\ub294 \uc774\ub97c \ud655\uc778\ud558\uace0 \uadf8\ub0a0 \uc624\ud6c4\uc5d0 \ud328\ud0a4\uc9c0 \uc13c\ud130\ub97c \uc5f4\uace0 \uc5c5\ub370\uc774\ud2b8\ub97c \ud074\ub9ad\ud55c \ud6c4 \ud655\uc778\ud558\ub294 \uac04\ub2e8\ud55c \uc870\uce58\ub97c \ucde8\ud588\uc2b5\ub2c8\ub2e4. \uc774\uac83\uc774 \uc804\uccb4 \ud574\uacb0 \uacbd\ub85c\uc774\uba70, \uc6f9 \uc2a4\ud14c\uc774\uc158 \uc2dc\uc2a4\ud15c \ubb38\uc81c\uac00 \uba70\uce60\uc774 \uc544\ub2cc \uba87 \ubd84 \ub9cc\uc5d0 \ud574\uacb0\ub41c \uc774\uc720\uc785\ub2c8\ub2e4.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1400\" height=\"852\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" src=\"https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/php2shell-qnap-to-be-announced.webp\" alt=\"QNAP \uad8c\uace0 \uc0ac\ud56d QSA-26-18\uc740 \uc218\uc815\ub41c \ubc84\uc804 \ud589\ub9c8\ub2e4 &quot;\uc218\uc815 \uc911&quot; \ubc0f &quot;\ucd94\ud6c4 \uacf5\uc9c0 \uc608\uc815&quot; \uc0c1\ud0dc\ub97c \ud45c\uc2dc\ud569\ub2c8\ub2e4.\" class=\"wp-image-22081\" srcset=\"https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/php2shell-qnap-to-be-announced.webp 1400w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/php2shell-qnap-to-be-announced-300x183.webp 300w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/php2shell-qnap-to-be-announced-1024x623.webp 1024w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/php2shell-qnap-to-be-announced-768x467.webp 768w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/php2shell-qnap-to-be-announced-18x12.webp 18w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/php2shell-qnap-to-be-announced-600x365.webp 600w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/php2shell-qnap-to-be-announced-400x243.webp 400w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/php2shell-qnap-to-be-announced-1000x609.webp 1000w\" \/><figcaption class=\"wp-element-caption\">QNAP QSA-26-18: \uc0c1\ud0dc: \uc218\uc815 \uc911\uc774\uba70, \uc218\uc815\ub41c \ubaa8\ub4e0 \ubc84\uc804\uc740 \ucd94\ud6c4 \uacf5\uc9c0\ub420 \uc608\uc815\uc785\ub2c8\ub2e4.<\/figcaption><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">QNAP\uc740 \uac19\uc740 \ub0a0\uc9dc\uc5d0 \uacf5\uc9c0\ub97c \ubc1c\ud45c\ud558\uace0 QTS 6.1.0, QTS 5.2.11 \ubc0f \uc774\uc804 \ubc84\uc804, QuTS hero h6.1.0, h6.0.x \ubc0f h5.2.11 \ubc0f \uc774\uc804 \ubc84\uc804, QuTScloud c5.2.9 \ubc0f \uc774\uc804 \ubc84\uc804, Note Station 3, QNE ADRA, ARM32 \ubaa8\ub378\uc6a9 QVR Surveillance, TVR OS \ub4f1 \uc601\ud5a5\uc744 \ubc1b\ub294 \uc81c\ud488\uad70 \ubaa9\ub85d\uc744 \uacf5\uac1c\ud588\uc2b5\ub2c8\ub2e4. \ubaa8\ub4e0 \uc81c\ud488\uc740 \uc218\uc815 \uc911(Fixing) \uc0c1\ud0dc\ub85c \ud45c\uc2dc\ub418\uba70 \uc218\uc815\ub41c \ubc84\uc804\uc740 \uc5c6\uc2b5\ub2c8\ub2e4. PHP \ub7f0\ud0c0\uc784\uc740 QTS \uc6f9 \uad6c\uc131 \uc694\uc18c\uc758 \uc77c\ubd80\uc774\ubbc0\ub85c \uc5c5\ub370\uc774\ud2b8\ud560 \ud328\ud0a4\uc9c0\uac00 \uc5c6\uc5b4 \ud38c\uc6e8\uc5b4 \uc5c5\ub370\uc774\ud2b8\ub97c \ud1b5\ud574 \ubb38\uc81c\ub97c \ud574\uacb0\ud574\uc57c \ud569\ub2c8\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">QNAP\uc740 PHP2Shell \uacf5\uaca9 \ud53c\ud574\uc790\ub4e4\uc5d0\uac8c \ub2f9\ubd84\uac04 \ub2e4\uc74c\uacfc \uac19\uc740 \uc644\ud654 \uc870\uce58\ub97c \uc81c\uacf5\ud560 \uc608\uc815\uc774\uba70, \uadf8 \ub0b4\uc6a9\uc740 \ub9e4\uc6b0 \uc911\uc694\ud558\ubbc0\ub85c \uaf3c\uaf3c\ud788 \uc77d\uc5b4\ubcfc \ud544\uc694\uac00 \uc788\uc2b5\ub2c8\ub2e4. \ub77c\uc6b0\ud130 \ud3ec\ud2b8 \ud3ec\uc6cc\ub529 \ubc0f UPnP \ube44\ud65c\uc131\ud654, myQNAPcloud \uc11c\ube44\uc2a4 \uac8c\uc2dc \ucde8\uc18c, \uc6d0\uaca9 \uc811\uc18d\uc744 VPN \ub4a4\ub85c \uc774\ub3d9, \uad00\ub9ac \ud3ec\ud2b8\ub97c \uc2e0\ub8b0\ud560 \uc218 \uc788\ub294 \uc11c\ube0c\ub137\uc73c\ub85c \uc81c\ud55c, \ud544\uc694 \uc5c6\ub294 PHP \uae30\ubc18 \uc560\ud50c\ub9ac\ucf00\uc774\uc158 \uc911\uc9c0, \uc0ac\uc6a9\ud558\uc9c0 \uc54a\ub294 \ub0b4\uc7a5 \uc6f9 \uc11c\ubc84 \ube44\ud65c\uc131\ud654, \uadf8\ub9ac\uace0 QuLog Center\uc5d0\uc11c \uce68\ud574 \uc9d5\ud6c4 \ud655\uc778 \ub4f1\uc774 \ud3ec\ud568\ub429\ub2c8\ub2e4. \uc774\ub294 \ud328\uce58\uac00 \uc801\uc6a9\ub418\uc9c0 \uc54a\uc740 \uc2dc\uc2a4\ud15c\uc5d0 \ub300\ud55c \uc720\uc6a9\ud55c \uc870\uc5b8\uc774\uba70, \uacf5\uac1c \uc6f9\uc0ac\uc774\ud2b8\ub97c \uc6b4\uc601\ud558\ub294 \uc0ac\uc6a9\uc790\ub77c\uba74 \uc6f9\uc0ac\uc774\ud2b8\ub97c \uc911\ub2e8\ud558\ub77c\ub294 \uad8c\uace0\uc774\uae30\ub3c4 \ud569\ub2c8\ub2e4.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1400\" height=\"814\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" src=\"https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/php2shell-asustor-retirement.webp\" alt=\"ASUSTOR\ub294 2026\ub144 10\uc6d4 22\uc77c\uc790\ub85c PHP 7, 7.3, 7.4 \ubc0f 8.1 \ubc84\uc804\uc744 \uc9c0\uc6d0 \uc885\ub8cc\ud55c\ub2e4\uace0 \ubc1c\ud45c\ud588\uc2b5\ub2c8\ub2e4.\" class=\"wp-image-22082\" srcset=\"https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/php2shell-asustor-retirement.webp 1400w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/php2shell-asustor-retirement-300x174.webp 300w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/php2shell-asustor-retirement-1024x595.webp 1024w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/php2shell-asustor-retirement-768x447.webp 768w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/php2shell-asustor-retirement-18x10.webp 18w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/php2shell-asustor-retirement-600x349.webp 600w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/php2shell-asustor-retirement-400x233.webp 400w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/php2shell-asustor-retirement-1000x581.webp 1000w\" \/><figcaption class=\"wp-element-caption\">ASUSTOR\ub294 PHP2Shell\uc5d0 \ub300\ud55c \ub2f5\ubcc0\uc73c\ub85c \uae30\uc874 PHP \ubc84\uc804\uc744 \ud328\uce58\ud558\ub294 \ub300\uc2e0 \ub354 \uc774\uc0c1 \uc0ac\uc6a9\ud558\uc9c0 \uc54a\ub3c4\ub85d \ud588\uc2b5\ub2c8\ub2e4.<\/figcaption><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">ASUSTOR\ub294 \uc138 \ubc88\uc9f8 \ubc29\uc2dd\uc744 \ud0dd\ud588\uc2b5\ub2c8\ub2e4. 10\uc6d4 22\uc77c\uc790 \uacf5\uc9c0(\uc81c\ubaa9: \ub808\uac70\uc2dc PHP \uc9c0\uc6d0 \uc885\ub8cc)\uc5d0\uc11c PHP 7, PHP 7.3, PHP 7.4, PHP 8.1\uc744 App Central\uc5d0\uc11c \uc989\uc2dc \uc0ad\uc81c\ud558\uace0, \uc911\uc694\ud55c \ub370\uc774\ud130 \ubc31\uc5c5\uc744 \uad8c\uc7a5\ud558\uba70, \uc55e\uc73c\ub85c\ub294 PHP 8.3 \ub610\ub294 8.4\ub9cc \uc0ac\uc6a9\ud558\ub3c4\ub85d \uc548\ub0b4\ud588\uc2b5\ub2c8\ub2e4. \uc5c5\uc2a4\ud2b8\ub9bc\uc5d0\uc11c 8.2 \uc774\uc0c1 \ubc84\uc804\ub9cc \ud328\uce58\ud55c\ub2e4\ub294 \uc810\uc744 \uace0\ub824\ud558\uba74 \uc774\ub7ec\ud55c \uc870\uce58\ub294 \ud0c0\ub2f9\ud569\ub2c8\ub2e4. \ud558\uc9c0\ub9cc \uc624\ub798\ub41c PHP \uc560\ud50c\ub9ac\ucf00\uc774\uc158\uc744 \uc0ac\uc6a9\ud558\ub294 \uc0ac\uc6a9\uc790\ub294 \ud574\ub2f9 \ub7f0\ud0c0\uc784\uc774 \uc218\uc815\ub418\ub294 \ub300\uc2e0 \uc2a4\ud1a0\uc5b4\uc5d0\uc11c \uc0ac\ub77c\uc9c0\uac8c \ub418\uba70, ASUSTOR\ub294 8.3 \ub610\ub294 8.4\uc758 \ud328\uce58\ub41c \ube4c\ub4dc\ub97c \ubc30\ud3ec\ud588\ub2e4\ub294 \uc5b8\uae09\ub3c4 \ud558\uc9c0 \uc54a\uc558\uc2b5\ub2c8\ub2e4. \uc774\uc640 \ub300\uc870\uc801\uc73c\ub85c Synology\ub294 ASUSTOR\uac00 \ub9c8\uc774\uadf8\ub808\uc774\uc158\uc744 \uc694\uccad\ud55c \uc0ac\uc6a9\uc790\ub4e4\uc744 \uc704\ud574 7.4.33-0131 \ubc84\uc804\uc758 \uc218\uc815\ub41c 7.4 \ube4c\ub4dc\ub97c \ubc30\ud3ec\ud588\uc2b5\ub2c8\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">UGREEN\uc758 \uacbd\uc6b0, UGOS Pro\uc5d0 \ub300\ud55c PHP2Shell \ubcf4\uc548 \uad8c\uace0\ub97c \uc804\ud600 \ucc3e\uc744 \uc218 \uc5c6\uc5c8\uc2b5\ub2c8\ub2e4. \uacf5\uac1c\uc801\uc778 \ubc1c\ud45c\uac00 \uc5c6\ub2e4\uace0 \ud574\uc11c \uc81c\ud488\uc774 \ucde8\uc57d\ud558\ub2e4\ub294 \uc99d\uac70\ub294 \uc544\ub2c8\uba70, UGOS Pro\ub294 \ub2e8\uc21c\ud788 \uc6f9\uc5d0\uc11c \uc0ac\uc6a9\ud560 \uc218 \uc788\ub294 PHP \ub7f0\ud0c0\uc784\uc744 \uc81c\uacf5\ud558\uc9c0 \uc54a\uc744 \uc218\ub3c4 \uc788\uc2b5\ub2c8\ub2e4. \ud558\uc9c0\ub9cc \uc81c\ud488 \uc18c\uc720\uc790\ub77c\uba74 \uce68\ubb35\uc740 \uc870\uce58\ub97c \ucde8\ud560 \uc218 \uc788\ub294 \uadfc\uac70\uac00 \ub418\uc9c0 \ubabb\ud558\uba70, \uc774\ub294 \uadf8 \uc790\uccb4\ub85c \uc77c\uc885\uc758 \ucde8\uc57d\uc810 \ub178\ucd9c\ub85c \ubcfc \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\uc774 \ubaa8\ub4e0 \uac83\uc774 Synology\ub97c \uc644\ubcbd\ud558\uac8c \ub9cc\ub4dc\ub294 \uac83\uc740 \uc544\ub2d9\ub2c8\ub2e4. PHP 7.3 \ubb38\uc81c\ub97c \ud574\uacb0\ud558\uc9c0 \ubabb\ud558\uace0, DSM 7.2\ub97c \uc9c0\uc6d0 \uc885\ub8cc\ub85c \ud45c\uc2dc\ud558\uba70, \uc790\uccb4 PHP \uad6c\uc131 \uc694\uc18c\ub294 \ud328\uce58\uac00 \uc544\ub2cc \uc5c5\ub370\uc774\ud2b8 \uc77c\uc815\ub9cc \uc81c\uacf5\ud558\uace0 \uc788\uc2b5\ub2c8\ub2e4. \ud575\uc2ec\uc740 \ube0c\ub79c\ub4dc \ub17c\uc7c1\ubcf4\ub2e4 \ub354 \uc881\uace0 \uc720\uc6a9\ud55c \ubd80\ubd84\uc5d0 \uc788\uc2b5\ub2c8\ub2e4. PHP \uc5d4\uc9c4\uc5d0\uc11c \uc0ac\uc804 \uc778\uc99d \uc6d0\uaca9 \ucf54\ub4dc \uc2e4\ud589 \ubc84\uadf8\uac00 \ubc1c\uacac\ub41c \ub0a0, \ud55c \uc5c5\uccb4\ub294 \ud328\ud0a4\uc9c0 \uc13c\ud130\uc5d0 \ud574\uacb0 \ubc84\ud2bc\uc744 \ucd94\uac00\ud588\uc9c0\ub9cc, \ub2e4\ub978 \uc5c5\uccb4\ub4e4\uc740 \uadf8\uc800 \uae30\ub2e4\ub9ac\ub294 \uc218\ubc16\uc5d0 \uc5c6\uc5c8\uc2b5\ub2c8\ub2e4.<\/p>\n\n\n\n<h2 id=\"where-to-find-more-official-resources\" class=\"wp-block-heading\">\ub354 \ub9ce\uc740 \uacf5\uc2dd \uc790\ub8cc\ub97c \ucc3e\uc744 \uc218 \uc788\ub294 \uacf3<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">PHP2Shell\uc740 \uc774 \uae00\uc744 \uc4f0\ub294 \uc2dc\uc810\uc5d0\uc11c \ucd9c\uc2dc\ub41c \uc9c0 \uc774\ud2c0\ubc16\uc5d0 \ub418\uc9c0 \uc54a\uc558\uace0 \uc0c1\ud669\uc774 \uacc4\uc18d \ubcc0\ud654\ud558\uace0 \uc788\uc73c\ubbc0\ub85c \uc694\uc57d\ubcf4\ub2e4\ub294 \uc6d0\ubcf8 \uc790\ub8cc\ub97c \ucc38\uace0\ud558\uc2dc\uae30 \ubc14\ub78d\ub2c8\ub2e4. \uc544\uc9c1 \uc5b4\ub5a4 \ubca4\ub354\uc5d0\uc11c\ub3c4 \uacf5\uc2dd\uc801\uc778 \ub3d9\uc601\uc0c1 \uc790\ub8cc\ub97c \uc81c\uacf5\ud558\uc9c0 \uc54a\uc558\uc73c\ubbc0\ub85c \uc544\ub798 \ubaa9\ub85d\uc740 \ud29c\ud1a0\ub9ac\uc5bc\uc774 \uc544\ub2cc \ubb38\uc11c \uc790\ub8cc\uc785\ub2c8\ub2e4.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/www.synology.com\/en-global\/security\/advisory\/Synology_SA_26_14\" target=\"_blank\" rel=\"noreferrer noopener\">Synology-SA-26:14<\/a> \uc774 \ubc84\uc804\uc774 \uacf5\uc2dd\uc801\uc778 \ubc84\uc804\ud45c\uc785\ub2c8\ub2e4. \uad8c\uace0 \uc0ac\ud56d\uc774 \uac1c\uc815\ub420 \uc218 \uc788\uc73c\ubbc0\ub85c \ud328\uce58\ub97c \uc801\uc6a9\ud558\uae30 \uc804\uc5d0 \ub2e4\uc2dc \ud655\uc778\ud558\uc2ed\uc2dc\uc624.<\/li>\n\n\n\n<li><a href=\"https:\/\/www.synology.com\/en-global\/company\/news\/article\/php2shell\/Synology%20Statement%20on%20PHP2Shell%20Vulnerabilities\" target=\"_blank\" rel=\"noreferrer noopener\">Synology PSIRT \uc131\uba85\uc11c<\/a> \uc601\ud5a5\uc744 \ubc1b\ub294 \ud328\ud0a4\uc9c0 \ubaa9\ub85d\uc744 \uc81c\uacf5\ud558\uace0 DSM \ub0b4\ubd80 \uad6c\uc131 \uc694\uc18c \ubc0f \uba54\uc77c \uc2a4\ud14c\uc774\uc158 \uc608\uc678\uc5d0 \ub300\ud574 \uc124\uba85\ud569\ub2c8\ub2e4.<\/li>\n\n\n\n<li>\uc0c1\uc704 GitHub \uad8c\uace0 \uc0ac\ud56d\uc778 GHSA-w8hw-w9fx-j79w \ubc0f GHSA-6wmf-4rv5-p3rp\ub294 Synology \uad8c\uace0 \uc0ac\ud56d\uc5d0 \ub9c1\ud06c\ub418\uc5b4 \uc788\uc73c\uba70 \uacf5\uae09\uc5c5\uccb4 \ud328\ud0a4\uc9d5\uc774 \uc544\ub2cc \uc5d4\uc9c4 \ub3d9\uc791\uc5d0 \ub300\ud574 \uc124\uba85\ud569\ub2c8\ub2e4.<\/li>\n\n\n\n<li><a href=\"https:\/\/www.qnap.com\/en\/security-advisory\/qsa-26-18\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">\ud050\ub0c5 QSA-26-18<\/a> QTS \ub610\ub294 QuTS hero\ub97c \uc2e4\ud589\ud558\uba74 \uace0\uc815\ub41c \ud38c\uc6e8\uc5b4 \ubc84\uc804\uc774 \ud45c\uc2dc\ub418\ub294 \uacf3\uc785\ub2c8\ub2e4. \ub274\uc2a4 \uae30\uc0ac\uac00 \uc544\ub2c8\ub77c \ud574\ub2f9 \ud398\uc774\uc9c0\ub97c \uc8fc\uc2dc\ud574\uc57c \ud569\ub2c8\ub2e4.<\/li>\n\n\n\n<li>\uc0ac\uc6a9\uc790\uc758 \ud328\ud0a4\uc9c0 \uc13c\ud130\ub294 \uc124\uce58\ub41c \ud56d\ubaa9\uc5d0 \ub300\ud55c \ucd5c\uc885\uc801\uc778 \uc815\ubcf4\ub97c \uc81c\uacf5\ud569\ub2c8\ub2e4. \uad8c\uace0 \uc0ac\ud56d\uc740 \ubaa9\ud45c \ube4c\ub4dc\ub97c \uc54c\ub824\uc8fc\uace0, \ud0c0\uc77c\uc740 \uc2e4\uc81c\ub85c \uc124\uce58\ub41c \ud56d\ubaa9\uc744 \ubcf4\uc5ec\uc90d\ub2c8\ub2e4. <code>php -v<\/code> \ud604\uc7ac \uc2e4\ud589 \uc911\uc778 \ud56d\ubaa9\uc744 \uc54c\ub824\uc90d\ub2c8\ub2e4.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Synology \uac00\uc0c1 \uba38\uc2e0\uc5d0\uc11c \uacf5\uc6a9 \uc0ac\uc774\ud2b8\ub97c \uc6b4\uc601\ud558\ub294 \ubc29\ubc95\uc5d0 \ub300\ud55c \uc790\uc138\ud55c \ub0b4\uc6a9\uc740 \ub2e4\uc74c \uac00\uc774\ub4dc\ub97c \ucc38\uc870\ud558\uc138\uc694. <a href=\"https:\/\/synopower.club\/ko\/synology-vdsm-docker-migration\/\">VDSM \uac8c\uc2a4\ud2b8 \uac04\uc5d0 Docker \uc2a4\ud0dd\uc744 \uc774\ub3d9\ud558\ub294 \ubc29\ubc95<\/a> \uc774 \uae00\uc5d0\uc11c\ub294 \uc774\ubc88 \ube44\uc0c1 \uc0c1\ud669\uc5d0\uc11c \uc0dd\uc874\ud560 \uc218 \uc788\uac8c \ud574\uc900 \uc2a4\ub0c5\uc0f7 \ubc0f \ub864\ubc31 \uc2b5\uad00\uc5d0 \ub300\ud574 \ub2e4\ub8f9\ub2c8\ub2e4.<\/p>\n\n\n\n<h2 id=\"php2shell-limits-and-security-notes\" class=\"wp-block-heading\">PHP2Shell \uc81c\ud55c \uc0ac\ud56d \ubc0f \ubcf4\uc548 \ucc38\uace0 \uc0ac\ud56d<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">PHP2Shell \ud328\uce58\ub294 DSM\uc5d0\uc11c\ub294 \uac04\ub2e8\ud558\uc9c0\ub9cc \ub2e4\ub978 \ud658\uacbd\uc5d0\uc11c\ub294 \uae4c\ub2e4\ub86d\uae30 \ub54c\ubb38\uc5d0 \uc791\uc5c5\uc774 \uc644\ub8cc\ub418\uc5c8\ub2e4\uace0 \uc120\uc5b8\ud558\uae30 \uc804\uc5d0 \uba87 \uac00\uc9c0 \uc81c\ud55c \uc0ac\ud56d\uc744 \uba85\ud655\ud788 \ubc1d\ud788\ub294 \uac83\uc774 \uc88b\uc2b5\ub2c8\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">PHP2Shell \ud328\ud0a4\uc9c0 \uc5c5\ub370\uc774\ud2b8\ub294 \uc0ac\uc774\ud2b8 \uac10\uc0ac\uac00 \uc544\ub2d9\ub2c8\ub2e4. PHP\ub97c \uc5c5\ub370\uc774\ud2b8\ud558\uba74 \ud574\ub2f9 \uc2dc\uc810\ubd80\ud130 \ucde8\uc57d\uc810\uc740 \ud574\uacb0\ub418\uc9c0\ub9cc, 10\uc6d4 20\uc77c\uc5d0\uc11c 22\uc77c \uc0ac\uc774\uc5d0 \ud574\ub2f9 \uc11c\ubc84\uc5d0 \uc778\ud130\ub137 \uc811\uadfc\uc774 \uac00\ub2a5\ud588\ub2e4\uba74 \uc720\ud6a8\ud55c \uc775\uc2a4\ud50c\ub85c\uc787\uc774 \uacf5\uac1c\ub41c \ub3d9\uc548\uc5d0\ub3c4 \uc811\uadfc\uc774 \uac00\ub2a5\ud588\ub358 \uac83\uc785\ub2c8\ub2e4. \ub85c\uadf8\uc5d0\uc11c \uc608\uc0c1\uce58 \ubabb\ud55c POST \uc694\uccad\ub7c9\uc774 \uc788\ub294\uc9c0 \ud655\uc778\ud558\uace0, \uc4f0\uae30 \uac00\ub2a5\ud55c \ub514\ub809\ud130\ub9ac\uc5d0 \ud30c\uc77c\uc774 \uc0dd\uc131\ub418\uc5c8\ub294\uc9c0 \uc0b4\ud3b4\ubcf4\uace0, PHP \uc6cc\ucee4\uac00 \ubcf4\uc720\ud558\uace0 \uc788\uc744 \uc218 \uc788\ub294 \ubaa8\ub4e0 \uc790\uaca9 \uc99d\uba85\uc744 \uc8fc\uae30\uc801\uc73c\ub85c \uad50\uccb4\ud558\uc2ed\uc2dc\uc624. \uba54\ubaa8\ub9ac \ub178\ucd9c \ubcc0\uc885\uc758 \uacbd\uc6b0 \uc790\uaca9 \uc99d\uba85 \uad50\uccb4\ub294 \ub2e8\uc21c\ud55c \ud53c\ud574\ub9dd\uc0c1\uc774 \uc544\ub2c8\ub77c \ud569\ub9ac\uc801\uc778 \uc608\ubc29 \uc870\uce58\uc785\ub2c8\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">PHP2Shell \uac80\uc99d\uc740 \uc2e4\ud589 \uc911\uc778 \uc778\ud130\ud504\ub9ac\ud130\ub97c \ub300\uc0c1\uc73c\ub85c \ud574\uc57c \ud569\ub2c8\ub2e4. \ub300\uc2dc\ubcf4\ub4dc, \ube4c\ub4dc \ub85c\uadf8, \uc751\ub2f5 \ud5e4\ub354 \ubaa8\ub450 \uc774\ubc88 \uac80\uc99d \uacfc\uc815\uc5d0\uc11c \ucd5c\uc18c \ud55c \ubc88 \uc774\uc0c1 \uc2e4\ud328\ud588\uc2b5\ub2c8\ub2e4. CDN\uc740 \ubc84\uc804 \uc815\ubcf4\ub97c \uc54c\ub824\uc8fc\ub294 \ud5e4\ub354\ub97c \uc81c\uac70\ud560 \uc218 \uc788\uace0, \ube4c\ub4dc\ub294 \uce90\uc2dc\ub41c \ub808\uc774\uc5b4\ub97c \uc7ac\uc0ac\uc6a9\ud558\uba74\uc11c\ub3c4 \uc131\uacf5\uc744 \ubcf4\uace0\ud560 \uc218 \uc788\uc73c\uba70, \ud328\ud0a4\uc9c0 \ud0c0\uc77c\uc740 \uc774\uc804 \uc6cc\ucee4\uac00 \uc5ec\uc804\ud788 \uc11c\ube44\uc2a4\ub97c \uc81c\uacf5\ud558\uace0 \uc788\uc74c\uc5d0\ub3c4 \ubd88\uad6c\ud558\uace0 \ud604\uc7ac \ubc84\uc804\uc744 \ud45c\uc2dc\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \uc624\uc9c1... <code>php -v<\/code> \uc694\uccad\uc744 \ucc98\ub9ac\ud558\ub294 \ub0b4\ubd80\uc5d0\uc11c \ubb38\uc81c\uac00 \ud574\uacb0\ub429\ub2c8\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\ucee8\ud14c\uc774\ub108\ub294 \uc5b4\ub5a4 \ubca4\ub354\uc758 PHP2Shell \uad8c\uace0 \uc0ac\ud56d\uc5d0\ub3c4 \ud3ec\ud568\ub418\uc9c0 \uc54a\uc2b5\ub2c8\ub2e4. NAS\uc5d0\uc11c \uac00\uc7a5 \ud754\ud788 \ubc1c\uc0dd\ud558\ub294 \uc798\ubabb\ub41c \ubcf4\uc548 \uc778\uc2dd\uc774\uae30 \ub54c\ubb38\uc5d0 \uc774 \uc810\uc744 \ub2e4\uc2dc \ud55c\ubc88 \uac15\uc870\ud569\ub2c8\ub2e4. \uc0ac\uc774\ud2b8\uac00 \ucee8\ud14c\uc774\ub108 \uad00\ub9ac\uc790\uc5d0\uc11c \uc2e4\ud589\ub418\ub294 \uacbd\uc6b0, \ud328\ud0a4\uc9c0 \uc13c\ud130\uc5d0\uc11c \ubaa8\ub4e0 \uac83\uc774 \ucd5c\uc2e0 \uc0c1\ud0dc\ub77c\uace0 \ubcf4\uace0\ud558\ub354\ub77c\ub3c4 \uc0ac\uc774\ud2b8\uc5d0 \ub300\ud55c \uc815\ubcf4\ub294 \uc804\ud600 \uc81c\uacf5\ud558\uc9c0 \uc54a\uc2b5\ub2c8\ub2e4. \uc790\uccb4 \ub7f0\ud0c0\uc784\uc744 \ud3ec\ud568\ud558\ub294 \ud0c0\uc0ac \uc560\ud50c\ub9ac\ucf00\uc774\uc158\uc5d0\ub3c4 \ub3d9\uc77c\ud558\uac8c \uc801\uc6a9\ub429\ub2c8\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\uad6c\uc131 \uc644\ud654 \uc870\uce58\ub294 \uc560\ucd08\ubd80\ud130 \ubd80\ubd84\uc801\uc778 \ud574\uacb0\ucc45\uc77c \ubfd0\uc785\ub2c8\ub2e4. \uc138\uc158 \uc5c5\ub85c\ub4dc \uc9c4\ud589\ub960 \ud45c\uc2dc\ub97c \ube44\ud65c\uc131\ud654\ud558\uba74 \ub3c4\uc6c0\uc774 \ub418\uc9c0\ub9cc, \uba54\ubaa8\ub9ac \uc81c\ud55c\uc744 \uc81c\uac70\ud558\ub294 \uac83\uc740 \ud55c \uac00\uc9c0 \uc704\ud5d8\uc744 \ub2e4\ub978 \uc704\ud5d8\uc73c\ub85c \ubc14\uafb8\ub294 \uac83\uc77c \ubfd0\uc774\uba70, \ub77c\uc6b0\ud130 \uce68\uc785 \ubc29\uc9c0 \uae30\ub2a5\uc740 \ub2e4\ub978 \uacf3\uc5d0\uc11c \uc885\ub8cc\ub418\ub294 TLS \ud2b8\ub798\ud53d\uc744 \uac80\uc0ac\ud560 \uc218 \uc5c6\uc2b5\ub2c8\ub2e4. \uc774\ub7ec\ud55c \uc870\uce58\ub4e4\uc740 \ubaa8\ub450 \uc2e4\uc81c \ud328\uce58\ub97c \ub9c8\ub828\ud558\ub294 \ub3d9\uc548 \uc2dc\uac04\uc744 \ubc8c\uc5b4\uc8fc\ub294 \uc218\ub2e8\uc73c\ub85c \uc0dd\uac01\ud574\uc57c \ud558\uba70, \ud328\uce58\ub97c \ub300\uccb4\ud558\ub294 \uc218\ub2e8\uc73c\ub85c \uc5ec\uaca8\uc11c\ub294 \uc548 \ub429\ub2c8\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\uc9c0\uc6d0\uc774 \uc885\ub8cc\ub41c \ub7f0\ud0c0\uc784\uc740 PHP2Shell \uacbd\ub85c\uac00 \uc804\ud600 \uc5c6\uc2b5\ub2c8\ub2e4. PHP 7.3 \uc774\uc804 \ubc84\uc804\uc740 \uc5c5\uc2a4\ud2b8\ub9bc\uc774\ub098 Synology\uc5d0\uc11c \uc544\ubb34\ub7f0 \uc9c0\uc6d0\ub3c4 \ubc1b\uc9c0 \ubabb\ud588\uc2b5\ub2c8\ub2e4. \ub9cc\uc57d \uc0ac\uc774\ud2b8\uc5d0\uc11c \uc9c0\uc6d0\ub418\uc9c0 \uc54a\ub294 \ube0c\ub79c\uce58\ub97c \uc815\ub9d0\ub85c \uc0ac\uc6a9\ud574\uc57c \ud55c\ub2e4\uba74, \ub9c8\uc774\uadf8\ub808\uc774\uc158, \uaca9\ub9ac \ub610\ub294 \uc778\ud130\ub137 \uc811\uc18d \ucc28\ub2e8\uc774\ub77c\ub294 \uc138 \uac00\uc9c0 \uc120\ud0dd\uc9c0\ubc16\uc5d0 \uc5c6\uc2b5\ub2c8\ub2e4. \ub124 \ubc88\uc9f8 \uc635\uc158\uc740 \uc5c6\uc73c\uba70, \uadf8\ub807\uc9c0 \uc54a\uc740 \ucc99\ud558\ub294 \uac83\uc740 \ub808\uac70\uc2dc \uc0ac\uc774\ud2b8\uac00 \uac19\uc740 \uc11c\ubc84\uc758 \ub2e4\ub978 \ubaa8\ub4e0 \uc2dc\uc2a4\ud15c\uacfc \uc5f0\uacb0\ub418\ub294 \ud1b5\ub85c\uac00 \ub418\ub294 \uacb0\uacfc\ub97c \ucd08\ub798\ud560 \ubfd0\uc785\ub2c8\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\ub9c8\uc9c0\ub9c9\uc73c\ub85c, \ub274\uc2a4\ubcf4\ub2e4\ub294 \uad8c\uace0 \uc0ac\ud56d\uc744 \uc8fc\uc2dc\ud558\uc2ed\uc2dc\uc624. Synology\ub294 SA-26:14\uac00 \ud574\uacb0\ub418\uc5c8\ub2e4\uace0 \ud45c\uc2dc\ud588\uc73c\uba70, \uac8c\uc2dc \ud6c4 6\ubd84 \uc774\ub0b4\uc5d0 \ud55c \ubc88 \uc218\uc815\ud588\uc2b5\ub2c8\ub2e4. QNAP\ub294 \uc218\uc815\ub41c \ubc84\uc804\uc774 \ub098\uc624\ub294 \ub300\ub85c QSA-26-18\uc744 \uc5c5\ub370\uc774\ud2b8\ud560 \uac83\uc774\ub77c\uace0 \ubc1d\ud614\uc2b5\ub2c8\ub2e4. \ub450 \ud398\uc774\uc9c0 \ubaa8\ub450 \ubcc0\uacbd\ub420 \uc608\uc815\uc774\uba70, \uc774 \uae00\uc5d0 \uc5b8\uae09\ub41c \ubc84\uc804 \ubc88\ud638\ub294 2026\ub144 10\uc6d4 22\uc77c\uc5d0 \uac8c\uc2dc\ub41c \ubc84\uc804\uc785\ub2c8\ub2e4.<\/p>\n\n\n\n<h2 id=\"references\" class=\"wp-block-heading\">\ucc38\uace0\ubb38\ud5cc<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/www.synology.com\/en-global\/security\/advisory\/Synology_SA_26_14\" target=\"_blank\" rel=\"noreferrer noopener\">Synology-SA-26:14 PHP2Shell \ubcf4\uc548 \uad8c\uace0<\/a>, 2026\ub144 10\uc6d4 22\uc77c \uac8c\uc2dc\ub428, \uc0c1\ud0dc \ud574\uacb0\ub428, PHP 7.4\ubd80\ud130 8.4\uae4c\uc9c0 \uc218\uc815\ub41c \ubc84\uc804 \ud3ec\ud568.<\/li>\n\n\n\n<li><a href=\"https:\/\/www.synology.com\/en-global\/company\/news\/article\/php2shell\/Synology%20Statement%20on%20PHP2Shell%20Vulnerabilities\" target=\"_blank\" rel=\"noreferrer noopener\">PHP2Shell \ucde8\uc57d\uc810\uc5d0 \ub300\ud55c Synology \uc131\uba85\uc11c<\/a>, PSIRT \uacf5\uc9c0\uc0ac\ud56d\uc5d0\ub294 \uc601\ud5a5\uc744 \ubc1b\ub294 \ud328\ud0a4\uc9c0\uc640 DSM \uc801\uc6a9 \ubc94\uc704\uac00 \uba85\uc2dc\ub418\uc5b4 \uc788\uc2b5\ub2c8\ub2e4.<\/li>\n\n\n\n<li><a href=\"https:\/\/www.qnap.com\/en\/security-advisory\/qsa-26-18\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">\ud050\ub0c5 QSA-26-18<\/a>, \uc0c1\ud0dc: \uc218\uc815 \uc911, \uc601\ud5a5\uc744 \ubc1b\ub294 \uc81c\ud488 \ubaa9\ub85d \ubc0f \uc218\uc815\ub41c \ubc84\uc804\uc740 \ucd94\ud6c4 \uacf5\uc9c0 \uc608\uc815\uc785\ub2c8\ub2e4.<\/li>\n\n\n\n<li><a href=\"https:\/\/www.asustor.com\/product\/status_detail?id=14\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">ASUSTOR Legacy PHP \uc11c\ube44\uc2a4 \uc885\ub8cc \uc548\ub0b4<\/a>, \uc571 \uc13c\ud2b8\ub7f4\uc5d0\uc11c PHP 7, 7.3, 7.4 \ubc0f 8.1 \ubc84\uc804\uc744 \uc81c\uac70\ud569\ub2c8\ub2e4.<\/li>\n\n\n\n<li><a href=\"https:\/\/www.helpnetsecurity.com\/2026\/10\/21\/php2shell-php-vulnerabilities-patched-cve-2026-109618-cve-2026-109619\/\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">PHP2Shell \uc5c5\uc2a4\ud2b8\ub9bc \ub9b4\ub9ac\uc2a4\uc5d0\uc11c Net Security\ub97c \uc9c0\uc6d0\ud574 \uc8fc\uc138\uc694.<\/a>, PHP 8.5.12, 8.4.27, 8.3.36 \ubc0f 8.2.35 \ubc84\uc804\uacfc \uc774\uc804 \ube0c\ub79c\uce58\uc5d0 \ub300\ud55c \uc18c\uc2a4 \ucf54\ub4dc\ub9cc \ud3ec\ud568\ub41c \ubc31\ud3ec\ud2b8\ub97c \ub2e4\ub8f9\ub2c8\ub2e4.<\/li>\n<\/ul>\n\n\n\n<h2 id=\"frequently-asked-questions\" class=\"wp-block-heading\">\uc790\uc8fc \ubb3b\ub294 \uc9c8\ubb38<\/h2>\n\n\n<div id=\"rank-math-faq\" class=\"rank-math-block\">\n<div class=\"rank-math-list\">\n<div id=\"faq-1\" class=\"rank-math-list-item\">\n<h3 class=\"rank-math-question\">\uc81c Synology NAS\uac00 PHP2Shell\uc5d0 \ucde8\uc57d\ud55c\uac00\uc694?<\/h3>\n<div class=\"rank-math-answer\">\n\n<p>PHP\uc5d0 \uc758\uc874\ud558\ub294 \ud328\ud0a4\uc9c0\uac00 \uc2e4\ud589 \uc911\uc774\uace0 \ud574\ub2f9 \ud328\ud0a4\uc9c0\uc5d0 \uc811\uadfc \uac00\ub2a5\ud55c \uacbd\uc6b0\uc5d0\ub9cc \uc704\ud5d8\ud569\ub2c8\ub2e4. Synology\ub294 Calendar, IDrive, Joomla, KodExplorer, MailStation, MediaWiki, phpMyAdmin, vtigerCRM, Web Station \ubc0f WordPress\ub97c \uc608\ub85c \ub4e4\uace0 \uc788\uc2b5\ub2c8\ub2e4. DSM \ub0b4\ubd80\uc5d0 PHP \uad6c\uc131 \uc694\uc18c\uac00 \uc874\uc7ac\ud558\uc9c0\ub9cc, Synology\ub294 \ub178\ucd9c\ub41c \uacf5\uaca9 \ud45c\uba74\uc774 \uc5c6\uc73c\uba70 \uc704\ud5d8\ub3c4\ub97c \ucd5c\uc18c \uc218\uc900\uc73c\ub85c \ud3c9\uac00\ud569\ub2c8\ub2e4.<\/p>\n\n<\/div>\n<\/div>\n<div id=\"faq-2\" class=\"rank-math-list-item\">\n<h3 class=\"rank-math-question\">DSM\uc5d0\uc11c PHP2Shell\uc744 \ud328\uce58\ud558\ub294 \ubc29\ubc95\uc740 \ubb34\uc5c7\uc778\uac00\uc694?<\/h3>\n<div class=\"rank-math-answer\">\n\n<p>\ud328\ud0a4\uc9c0 \uc13c\ud130\ub97c \uc5f4\uace0 &#039;\uc124\uce58\ub428&#039;\uc73c\ub85c \uc774\ub3d9\ud558\uc5ec &#039;\uc5c5\ub370\uc774\ud2b8 \uac00\ub2a5&#039;\uc73c\ub85c \ud45c\uc2dc\ub41c \ubaa8\ub4e0 PHP \ud328\ud0a4\uc9c0\ub97c \uc5c5\ub370\uc774\ud2b8\ud558\uc138\uc694. \ub300\uc0c1 \ube4c\ub4dc\ub294 7.4.33-0131, 8.0.30-0122, 8.1.34-0120, 8.2.35-0171, 8.3.36-0051 \ubc0f 8.4.27-0051\uc785\ub2c8\ub2e4. \uc5c5\ub370\uc774\ud2b8 \ud6c4 \uc885\uc18d \ud328\ud0a4\uc9c0\ub294 \uc790\ub3d9\uc73c\ub85c \uc7ac\uc2dc\uc791\ub418\uc9c0\ub9cc, \uba54\uc77c \uc2a4\ud14c\uc774\uc158\uc740 \uc218\ub3d9\uc73c\ub85c \uc5c5\ub370\uc774\ud2b8\ud574\uc57c \ud569\ub2c8\ub2e4.<\/p>\n\n<\/div>\n<\/div>\n<div id=\"faq-3\" class=\"rank-math-list-item\">\n<h3 class=\"rank-math-question\">\uc6cc\ub4dc\ud504\ub808\uc2a4\ub97c \uc5c5\ub370\uc774\ud2b8\ud558\uba74 \ubb38\uc81c\uac00 \ud574\uacb0\ub420\uae4c\uc694?<\/h3>\n<div class=\"rank-math-answer\">\n\n<p>\uc544\ub2c8\uc694. \ubc84\uadf8\ub294 WordPress\uac00 \uc544\ub2c8\ub77c PHP \uc5d4\uc9c4\uc5d0 \uc788\uc73c\ubbc0\ub85c \ucf54\uc5b4, \ud14c\ub9c8 \ubc0f \ud50c\ub7ec\uadf8\uc778 \uc5c5\ub370\uc774\ud2b8\ub294 \uc544\ubb34\ub7f0 \ub3c4\uc6c0\uc774 \ub418\uc9c0 \uc54a\uc2b5\ub2c8\ub2e4. \uc720\uc77c\ud55c \ud574\uacb0\ucc45\uc740 \uc0c8\ub85c\uc6b4 PHP \ube4c\ub4dc\ub97c \uc2e4\ud589\ud558\ub294 \uac83\uc785\ub2c8\ub2e4. \uc774\uac83\uc774 \uc774\ubc88 \uad8c\uace0 \uc0ac\ud56d\uc5d0 \ub300\ud55c \uac00\uc7a5 \ud754\ud55c \uc624\ud574\uc785\ub2c8\ub2e4.<\/p>\n\n<\/div>\n<\/div>\n<div id=\"faq-4\" class=\"rank-math-list-item\">\n<h3 class=\"rank-math-question\">PHP 7.4\uac00 Synology\uc5d0 \uc815\ub9d0\ub85c \ud328\uce58\ub418\uc5c8\ub098\uc694?<\/h3>\n<div class=\"rank-math-answer\">\n\n<p>\ub124. Synology\ub294 \uc0c1\uc704 PHP \ube0c\ub79c\uce58\uc5d0 \ub300\ud574 \ubc88\ud638\uac00 \ub9e4\uaca8\uc9c0\uc9c0 \uc54a\uc740 \uc18c\uc2a4 \ubc31\ud3ec\ud2b8\ub9cc \uc81c\uacf5\ud588\uc74c\uc5d0\ub3c4 \ubd88\uad6c\ud558\uace0 7.4.33-0131 \ubc84\uc804\uc744 \uac8c\uc2dc\ud588\uc2b5\ub2c8\ub2e4. PHP 7.3\uc740 \ub2e4\ub985\ub2c8\ub2e4. Synology\ub294 \ud574\ub2f9 \ubc84\uc804\uc774 \uc9c0\uc6d0 \uc885\ub8cc\ub418\uc5c8\uae30 \ub54c\ubb38\uc5d0 \uc218\uc815 \uc0ac\ud56d\uc744 \uc81c\uacf5\ud558\uc9c0 \uc54a\uc744 \uac83\uc774\ub77c\uace0 \ubc1d\ud614\uc2b5\ub2c8\ub2e4.<\/p>\n\n<\/div>\n<\/div>\n<div id=\"faq-5\" class=\"rank-math-list-item\">\n<h3 class=\"rank-math-question\">PHP2Shell\uc774 \ucee8\ud14c\uc774\ub108 \uad00\ub9ac\uc790\uc5d0\uc11c \uc2e4\ud589\ub418\ub294 \uc81c \uc0ac\uc774\ud2b8\uc5d0 \uc601\ud5a5\uc744 \ubbf8\uce58\ub098\uc694?<\/h3>\n<div class=\"rank-math-answer\">\n\n<p>\ud328\ud0a4\uc9c0 \uc5c5\ub370\uc774\ud2b8\ub294 \ud574\ub2f9 \uc774\ubbf8\uc9c0\uc5d0 \uc601\ud5a5\uc744 \uc8fc\uc9c0 \uc54a\uc2b5\ub2c8\ub2e4. `docker build \u2013pull` \uba85\ub839\uc73c\ub85c \uc774\ubbf8\uc9c0\ub97c \ub2e4\uc2dc \ube4c\ub4dc\ud558\uc5ec \uae30\ubcf8 \ub808\uc774\uc5b4\ub97c \ub2e4\uc2dc \ub2e4\uc6b4\ub85c\ub4dc\ud558\uace0, `up -d \u2013no-deps` \uba85\ub839\uc73c\ub85c \uc11c\ube44\uc2a4\ub97c \uc2dc\uc791\ud55c \ub2e4\uc74c, \ucee8\ud14c\uc774\ub108 \ub0b4\ubd80\uc5d0\uc11c `php -v` \uba85\ub839\uc73c\ub85c \ud655\uc778\ud574\uc57c \ud569\ub2c8\ub2e4. \ube4c\ub4dc \uc131\uacf5 \uba54\uc2dc\uc9c0\uac00 \ucd9c\ub825\ub418\ub354\ub77c\ub3c4 \uc774\ub294 \uc99d\uac70\uac00 \ub420 \uc218 \uc5c6\uc2b5\ub2c8\ub2e4.<\/p>\n\n<\/div>\n<\/div>\n<div id=\"faq-6\" class=\"rank-math-list-item\">\n<h3 class=\"rank-math-question\">session.upload_progress\ub97c \ube44\ud65c\uc131\ud654\ud558\uba74 \uc548\uc804\ud560\uae4c\uc694?<\/h3>\n<div class=\"rank-math-answer\">\n\n<p>\uc774\ub294 \ubaa8\ub4e0 \uacbd\ub85c\ub97c \ucc28\ub2e8\ud558\ub294 \uac83\uc774 \uc544\ub2c8\ub77c \ud558\ub098\uc758 \uacbd\ub85c\ub9cc \ucc28\ub2e8\ud558\ub294 \uac83\uc785\ub2c8\ub2e4. \uba54\ubaa8\ub9ac \ub178\ucd9c \ubcc0\ud615\uc740 \uc77c\ubc18\uc801\uc778 \uba40\ud2f0\ud30c\ud2b8 \ucc98\ub9ac\ub97c \uac70\uce58\ubbc0\ub85c \uc138\uc158 \uae30\ub2a5\uc774 \ud544\uc694\ud558\uc9c0 \uc54a\uc2b5\ub2c8\ub2e4. PHP \ud504\ub85c\uc81d\ud2b8 \uce21\uc5d0\uc11c\ub294 \uc644\ubcbd\ud55c \uc644\ud654\ucc45\uc740 \uc5c6\uc73c\uba70 \uc5c5\ub370\uc774\ud2b8\ub9cc\uc774 \uc720\uc77c\ud55c \uc548\uc804\ud55c \ud574\uacb0\ucc45\uc774\ub77c\uace0 \ubc1d\ud614\uc2b5\ub2c8\ub2e4.<\/p>\n\n<\/div>\n<\/div>\n<div id=\"faq-7\" class=\"rank-math-list-item\">\n<h3 class=\"rank-math-question\">\ub77c\uc6b0\ud130\uc758 \uc704\ud611 \ubc29\uc9c0 \uae30\ub2a5\uc73c\ub85c PHP2Shell\uc744 \ucc28\ub2e8\ud560 \uc218 \uc788\ub098\uc694?<\/h3>\n<div class=\"rank-math-answer\">\n\n<p>\uc758\ubbf8 \uc788\ub294 \uc815\ubcf4\ub294 \uc544\ub2d9\ub2c8\ub2e4. \ud574\ub2f9 \uc2dc\uadf8\ub2c8\ucc98 \uc5d4\uc9c4\uc740 TLS \ub0b4\ubd80\ub97c \uc77d\uc744 \uc218 \uc5c6\uc73c\uba70, \ub9ac\ubc84\uc2a4 \ud504\ub85d\uc2dc\uc640 \ub3d9\uc77c \uc11c\ube0c\ub137\uc5d0 \uc788\ub294 \uc624\ub9ac\uc9c4 \uc11c\ubc84 \uac04\uc758 \ud2b8\ub798\ud53d\uc740 \ud574\ub2f9 \uc5d4\uc9c4\uc5d0 \ub3c4\ub2ec\ud558\uc9c0 \uc54a\uc2b5\ub2c8\ub2e4. \ub610\ud55c, \uc774 \uae00\uc744 \uc791\uc131\ud558\ub294 \uc2dc\uc810 \uae30\uc900\uc73c\ub85c \uacf5\uc2dd Snort \ubc0f \uc2e0\ud765 \uc704\ud611 \uaddc\uce59 \uc138\ud2b8\uc5d0\ub294 \uc774\ub7ec\ud55c CVE\uc5d0 \ub300\ud55c \uaddc\uce59\uc774 \uac8c\uc2dc\ub418\uc9c0 \uc54a\uc558\uc2b5\ub2c8\ub2e4.<\/p>\n\n<\/div>\n<\/div>\n<div id=\"faq-8\" class=\"rank-math-list-item\">\n<h3 class=\"rank-math-question\">QNAP\uacfc ASUSTOR\ub294 PHP2Shell \ubb38\uc81c\ub97c \ud574\uacb0\ud588\ub098\uc694?<\/h3>\n<div class=\"rank-math-answer\">\n\n<p>2026\ub144 10\uc6d4 22\uc77c \ud604\uc7ac, QNAP \uad8c\uace0 QSA-26-18\uc740 &#039;\uc218\uc815 \uc911&#039; \uc0c1\ud0dc\uc774\uba70, \uc218\uc815\ub41c \ubaa8\ub4e0 \ubc84\uc804\uc740 &#039;\ubc1c\ud45c \uc608\uc815&#039;\uc73c\ub85c \ud45c\uc2dc\ub418\uc5b4 \uc788\uc2b5\ub2c8\ub2e4. ASUSTOR\ub294 \ud328\uce58\ub41c \ube4c\ub4dc\ub97c \uac8c\uc2dc\ud558\ub294 \ub300\uc2e0 App Central\uc5d0\uc11c \ub808\uac70\uc2dc PHP\ub97c \uc81c\uac70\ud558\ub294 \ubc29\uc2dd\uc73c\ub85c \ub300\uc751\ud588\uc2b5\ub2c8\ub2e4. Synology-SA-26:14\ub294 \uac19\uc740 \ub0a0 &#039;\ud574\uacb0\ub428&#039;\uc73c\ub85c \ud45c\uc2dc\ub418\uc5c8\uc73c\uba70, \uc804\uccb4 \ubc84\uc804 \ud45c\uac00 \uc81c\uacf5\ub418\uc5c8\uc2b5\ub2c8\ub2e4.<\/p>\n\n<\/div>\n<\/div>\n<\/div>\n<\/div>","protected":false},"excerpt":{"rendered":"<p>PHP2Shell is the name the industry settled on for CVE-2026-109618 and CVE-2026-109619, a pair of critical flaws in the PHP engine itself that allow unauthenticated remote code execution. Details leaked on 20 October 2026, a day before the coordinated disclosure, and the PHP project shipped emergency releases on 21 October. Because the bug lives in [&hellip;]<\/p>\n","protected":false},"author":0,"featured_media":22085,"comment_status":"open","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"_eb_attr":"","_xspeed_no_cache":false,"_xspeed_expiry_hours":0,"footnotes":""},"categories":[1],"tags":[],"class_list":["post-22083","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-others"],"_links":{"self":[{"href":"https:\/\/synopower.club\/ko\/wp-json\/wp\/v2\/posts\/22083","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/synopower.club\/ko\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/synopower.club\/ko\/wp-json\/wp\/v2\/types\/post"}],"replies":[{"embeddable":true,"href":"https:\/\/synopower.club\/ko\/wp-json\/wp\/v2\/comments?post=22083"}],"version-history":[{"count":1,"href":"https:\/\/synopower.club\/ko\/wp-json\/wp\/v2\/posts\/22083\/revisions"}],"predecessor-version":[{"id":22084,"href":"https:\/\/synopower.club\/ko\/wp-json\/wp\/v2\/posts\/22083\/revisions\/22084"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/synopower.club\/ko\/wp-json\/wp\/v2\/media\/22085"}],"wp:attachment":[{"href":"https:\/\/synopower.club\/ko\/wp-json\/wp\/v2\/media?parent=22083"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/synopower.club\/ko\/wp-json\/wp\/v2\/categories?post=22083"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/synopower.club\/ko\/wp-json\/wp\/v2\/tags?post=22083"}],"curies":[{"name":"\uc6cc\ub4dc\ud504\ub808\uc2a4","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}