X-twitter Facebook-f Pinterest-p
X-twitter Facebook-f Pinterest-p

Ugreen DXP4800 GT NAS review: The perfect NAS


Ugreen is back with another NAS update, this time to the DXP2800 and DXP4800 line with the new GT series models. Featuring updated processors, 10GbE connectivity, and more, these are some of Ugreen’s best NAS systems yet.

Ugreen NASync DXP4800 GT NAS.

9/10

Brand

Ugreen

CPU

AMD Ryzen Embedded R2514

Memory

8GB DDR4, expandable to 64GB

The Ugreen DXP4800 GT is the latest NAS from Ugreen, featuring dual 10Gb Ethernet, two NVMe slots, and a whole lot more. Shipping with 8GB of DDR4 RAM, you actually can replace it yourself and upgrade it to have up to 64GB of RAM should the need arise. Plus, UGOS continues to mature and is becoming a very solid NAS operating system.


Pros & Cons

  • Dual 10GbE
  • Two NVMe drive slots in addition to the four 3.5/2.5-inch drive bays
  • Ships with 8GB DDR4 RAM, easily upgradable to 64GB
  • You have to spin up your own software to use this NAS as a Google Drive/Dropbox replacement


Person testing the performance of a laptop


How we test

We go hands-on with every product to ensure it’s worth your time and money.

Price and availability

The Ugreen DXP4800 GT NAS is available for $660 from both Ugreen and Amazon. There is also a little brother to the DXP4800 GT, the DXP2800 GT with similar specs and just two drive bays available for $510 at both Amazon and Ugreen.

Brand

Ugreen

CPU

AMD Ryzen Embedded R2514

Memory

8GB DDR4, expandable to 64GB

Drive Bays

4 3.5/2.5-inch, 2 NVMe

Ports

USB-A/USB-C 10Gb/s, USB-A 480Mb/s, dual 10GbE, HDMI

OS

UGOS

Price

$660

Dimensions

10.1 × 7.0 × 7.0 inches

LAN Ports

Dual 10Gb Ethernet


Ugreen continues to improve on what it does best

A simple NAS with fantastic specs

It’s kind of crazy that Ugreen has turned itself around as much as they have. Once a phone charger and cable company, Ugreen is now a powerhouse in the NAS space. It’s hard to watch a YouTube video without seeing a Ugreen NAS being promoted somewhere—and for good reason.

Ugreen is putting out some pretty awesome NAS systems, and the DXP4800 GT continues the trend. Sporting the AMD Ryzen Embedded R2514 processor, this NAS has plenty of power for all of your storage needs. It might not be a high-end Intel chip, but it still definitely has the power to handle things like storing large files, running Plex or other Docker containers, and much more.

The DXP4800 GT ships with 8GB of DDR4 RAM pre-installed, but it’s not soldered, and you’re able to easily upgrade it yourself. On the bottom of the NAS there’s a little door you can unscrew to gain access to both SO-DIMM RAM slots as well as the two NVMe slots. This NAS can handle up to 64GB of RAM, which is pretty stellar if you ask me.

This NAS also has way better I/O than I expected at this price. For example, there are dual 10Gb Ethernet ports on the back of this NAS. Yes, two 10GbE ports. I would have hoped for one 10GbE, and been happy for the other to be 2.5GbE, but Ugreen put two 10GbE ports here.

Not only that, but there’s also a full-size SD 3.0 reader on the front, alongside both a USB-C and USB-A port which are both rated for 10Gb/s. On the back, there’s a USB-A 10Gb/s port alongside two USB-A 2.0 ports. You’ll also find a HDMI port capable of 4K output, should you want to hook this NAS up to a TV or monitor.

All-in-all, the Ugreen DXP4800 GT surprised me quite a bit with its specs, performance, and capabilities. Whenever I was doing file transfers to the NAS, I never felt like it slowed down. Plus, when running multiple Docker containers, it handled it like a champ.

The only “issue” is that it only ships with 8GB of RAM, which is plenty to get started, but, if you plan to run a lot of apps on it, you might want to upgrade that down the road.

UGOS is becoming a proven NAS platform

Docker, ext4 or btrfs, and so much more in an easy to use package

Ugreen's UGOS Pro NAS operating system home screen.

When I first used UGOS a few years ago, the NAS operating system was pretty weak. It lacked in a lot of areas, wasn’t very capable, and just didn’t have the fit and finish that I like to see on consumer products.

However, in 2026, UGOS is actually an extremely solid NAS platform. I’d say it’s almost on par with Synology’s DiskStation Manager, with only a few things holding it back from completely overtaking the king of NAS systems.

My experience with UGOS continues to get better with age though. Setting up my first share was easy and straightforward. Even if I had never used a NAS before, it would have been a simple task.

From there, installing my first Docker container was equally as easy, as was getting the rest of the settings configured. Ugreen has done a fantastic job of streamlining the setup of a NAS with UGOS.

The only place where I really wish UGOS would improve is with built-in apps. While I love that it has Docker support, I wish there was software similar to Synology Drive that would let me turn my NAS into a Dropbox or Google Drive replacement.

There’s a bit of Synology Drive’s functionality already within UGOS, but it’s not quite as mature. Really, if Ugreen was able to make remote access of files, and remote sharing of files, a simple task like Synology has done, then I think it would be the perfect NAS for everyone.

The new Ugreen GT lineup will become my go-to recommendation for a NAS

Great specs, great price, and easy to use OS. What more could you want?

At this point in the NAS game, Ugreen is my go-to. For just a little more than Synology’s latest 2-bay NAS, you can get the DXP2800 GT. The DXP4800 GT is similarly priced, only a little above the comparable Synology.

The difference is, Ugreen packs way more features into their NAS for the pricing. You get 10GbE on the DXP2800 GT, while the Synology DS225+ is stuck at 2.5GbE. You have two NVMe slots on the DXP2800 GT, while the DS225+ has zero NVMe slots. The DXP2800 GT ships with 8GB RAM and is user-upgradable to 64GB, while the DS225+ ships with 2GB RAM and tops out at 6GB.

The same story can be said for the DXP4800 GT. Really, Ugreen wins hands down when it comes to price to performance and specs. It’s hard to deny that Ugreen has become the king of the NAS game, and Synology got too comfortable with their place and simply hasn’t kept up.

For that reason, Ugreen is now the NAS that I recommend to anyone who plans to buy a NAS, whether they’re just getting started or they are experienced with NAS hardware.

Should you buy the Ugreen DXP4800 GT NAS?

Ugreen DXP4800 GT hard drive tray partially inserted with WD Red drive. Credit: Patrick Campanale / How-To Geek

If you’re in the market for a 2- or 4-bay NAS, I definitely think Ugreen should be your first choice. The Ugreen DXP4800 GT is a fantastic NAS for the money. The dual 10GbE ports, plenty of USB ports, the built-in SD card slot, and dual NVMe slots in both models make it easy to recommend Ugreen’s latest NAS lineup.

So, if you’ve held off on buying your first NAS, pick Ugreen. Unless you really need specific features that Synology offers like Synology Drive (which can be replicated on Ugreen using Nextcloud with a bit of work), there’s really no reason to choose any other NAS at this point.

Ugreen NASync DXP4800 GT NAS.

9/10

Brand

Ugreen

CPU

AMD Ryzen Embedded R2514

Memory

8GB DDR4, expandable to 64GB

The Ugreen DXP4800 GT is the latest NAS from Ugreen, featuring dual 10Gb Ethernet, two NVMe slots, and a whole lot more. Shipping with 8GB of DDR4 RAM, you actually can replace it yourself and upgrade it to have up to 64GB of RAM should the need arise. Plus, UGOS continues to mature and is becoming a very solid NAS operating system.




Source link

Leave a Reply

Subscribe to Our Newsletter

Get our latest articles delivered straight to your inbox. No spam, we promise.

This coin-sized flash drive gives my laptop double the storage space – and it’s $25 off

Europol Disrupts StealC and Amadey Malware Infrastructure in Operation Endgame

Why Frontier AI makes prioritization the most important part of your CTEM program

Cisco Unified CM Flaw CVE-2026-20230 Actively Exploited in the Wild

Ghost CMS flaw abused to push ClickFix attacks on hundreds of sites

Europol Disrupts StealC and Amadey Malware Infrastructure in Operation Endgame

Why Frontier AI makes prioritization the most important part of your CTEM program

Cisco Unified CM Flaw CVE-2026-20230 Actively Exploited in the Wild

Windows 11 finally finds files when you type two characters instead of three

Europol Disrupts StealC and Amadey Malware Infrastructure in Operation Endgame

Why Frontier AI makes prioritization the most important part of your CTEM program

Cisco Unified CM Flaw CVE-2026-20230 Actively Exploited in the Wild

Recent Reviews

Ghost CMS flaw abused to push ClickFix attacks on hundreds of sites


Ghost CMS flaw abused to push ClickFix attacks on hundreds of sites

Pierluigi Paganini
May 25, 2026

Threat actors are actively exploiting a security flaw, tracked as CVE-2026-26980, in Ghost CMS that was fixed months ago in real attacks against unpatched websites. According to Qianxin, the campaign has already affected more than 700 sites, including well-known organizations and universities.

The vulnerability is an SQL injection issue in Ghost’s Content API that can let an attacker read data from the database without logging in. In the worst case, this can expose the Admin API key, which can allow attackers to take over the site.

That key matters because it can be used to change published content. In this campaign, attackers used it to edit articles on compromised Ghost sites and insert malicious JavaScript at the end of pages. The goal was not just defacement, but to turn trusted websites into launch points for further malware delivery.

“After an in-depth investigation and analysis, we determined that this was not a targeted intrusion against the customer, but rather a large-scale poisoning campaign by an in-the-wild attack group targeting Ghost CMS. Although CVE-2026-26980 was publicly disclosed as early as February 19, a large number of users did not patch and upgrade in time, providing an opportunity for attackers.” reads the advisory published by Qianxin. “At least two groups are currently actively conducting such poisoning operations, and some sites have even become the target of competition between the two parties, with different malicious code being implanted one after another within a single day.”

The inserted code led visitors through a two-step chain. First, the page loaded a remote script that checked the browser and decided what the visitor should see. Then real victims were redirected to a fake verification page that looked like a normal “I’m human” check.

This is where the ClickFix part began. The page told users to press Windows+R, paste a command, and hit Enter. In practice, that command downloaded and started a malware payload on the victim’s machine. It was a classic social engineering trick: make the user do the dangerous part themselves.

Qianxin says the first signs of this activity appeared in early May. The malicious code found in the campaign had a compilation date of February 16, the same day Ghost announced the fix for CVE-2026-26980. That suggests the attackers moved quickly once they saw how many sites had not been updated.

The affected websites cover a wide range of sectors. Roughly half are personal blogs or independent sites, but the list also includes technology blogs, AI sites, media outlets, crypto projects, and educational institutions. Qianxin researchers say victims include sites linked to Harvard, Oxford, and DuckDuckGo.

The attack chain was also designed to be flexible. The loaders could fetch different payloads depending on the target, and the operators changed infrastructure several times.

“entire attack process has obvious five-stage characteristics of “CMS Takeover → Page Poisoning → Two-stage Loading → Social Engineering Lure (FakeCaptcha/ClickFix) → Malware Delivery”, and the entire process is highly automated: bulk vulnerability scanning → automatic key extraction → bulk injection → dynamic C2 distribution.” states the report.

In some cases, they switched domains after detection, keeping the campaign alive even when part of the chain was blocked.

“Through feature scanning of publicly accessible pages, we have cumulatively identified more than 700 poisoned victim domains, and have proactively contacted the sites for which contact information could be obtained, notifying them of the poisoning.” continues the report.

Qianxin also believes at least two different groups are involved. In some cases, the same site was hit more than once, with one attacker replacing the code left by another. That makes the campaign harder to clean up and shows how attractive compromised Ghost sites have become for abuse.

For site owners, the advice is straightforward. Ghost should be updated immediately, all credentials should be rotated, and site logs should be reviewed for suspicious admin API activity. Any injected scripts should be removed from the database itself, not just from the visual editor. Visitors who may have reached a poisoned site should also be warned.

The report includes Indicators of Compromise (IoCs) for the attacks observed by the researchers.

Follow me on Twitter: @securityaffairs and Facebook and Mastodon

Pierluigi Paganini

(SecurityAffairs – hacking, Ghost CMS)





Source link

Ghost CMS flaw abused to push ClickFix attacks on hundreds of sites

Third-Party Cyberattack Impacts Patient Information at The Oncology Institute

Lazarus APT unveils fileless RAT designed to evade detection

Copyright © 2024 All Rights Reserved.