PHP security issues could also threaten your NAS device — but not every vendor is able to patch just yet