Dang! Seems our old home NAS is bare-ass on the internet (thanks uPNP), with a hardcoded credential that is remotely exploitable (CVE-2024-3274). The suggested workaround is to turn off uPNP on the router, which I’d… NAS bare-ass on the internet