On October 12, 2026, Synology shipped DSM 7.4.1-90080 Update 1, marked Important, without listing any CVE or detail on the fixed flaws. Install the update anyway, but demand transparency and harden your NAS like the target it is.
On October 7, 2026, Immich shipped version 3.3, which introduces an opt-in revision of its machine learning models: MACHINE_LEARNING_MODEL_REVISION=v2 makes inference significantly faster and less memory-hungry across every backend, including CPU. If your photo NAS is running tight, this is the variable to add — but understand what it changes first.
Unraid and 45HomeLab have opened pre-orders for the X4, a pre-assembled four-bay home server shipped with Unraid OS pre-installed, starting at $1,199 and delivering in October 2026. For anyone torn between building their own box and buying a locked-down NAS, that price defines a third path — provided you read the trade-offs.
Plex ships Plex Media Server 1.43.3 and Plex Desktop 1.115.0 to close several flaws whose CVEs have not yet been published, while Censys counts more than 360,000 web interfaces exposed to the internet. Update server and clients, and check your NAS update channel, which can lag behind.
Unraid announced that its next major release will replace Slackware, its foundation for roughly twenty years, with Universal Blue’s uCore, an immutable OCI server image built on Fedora CoreOS. Built-in backups, native Docker Compose, and plugin permissions arrive with the architectural shift.
An IEEE study published in August 2026 analyzes 443,156 Backblaze drives across 1.66 million drive-years and corrects for age bias: under comparable conditions, HGST and WD fail about half as often as Seagate and Toshiba. For a NAS or homelab, the lesson is less about brand than about temperature and capacity.
Immich shipped version 3.0 on 2 July 2026, nine months after its first stable release and weeks after a two-year retrospective on its backing by nonprofit FUTO. It replaces Google Photos once you can afford roughly $300 of hardware and a disciplined off-site backup — skip either, and the migration trades Google’s reliability for a real chance of losing everything.
