Vendors / Unraid Records 7 All Threatist records
Exploited (KEV) 2 In CISA KEV
CVSS critical 2 CVSS 9.0–10.0
CVSS high 5 CVSS 7.0–8.9
Exploited now Unraid records in CISA KEV
Components Products in the NVD configurations · select one to filter the records Priority CRITICAL 100KEV
Unraid through 6.8.0 allows Remote Code Execution.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.95844 · Published 2020-03-16 · No fix listed
Priority CRITICAL 90KEV
Unraid 6.8.0 allows authentication bypass.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.93243 · Published 2020-03-16 · No fix listed CWE-697
Priority MEDIUM 44
Unraid Web Server ToggleState Command Injection Remote Code Execution Vulnerability.
CVSS 3.0 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01888 · Published 2026-06-24 · No fix listed CWE-78
Priority MEDIUM 44
Unraid Web Server FileUpload Command Injection Remote Code Execution Vulnerability.
CVSS 3.0 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01888 · Published 2026-06-24 · No fix listed CWE-78
Priority MEDIUM 43
Unraid 7.0.0 before 7.0.1 allows remote users to access the Unraid WebGUI and web console as root without authentication if a container is running in Host networking mode with Use Tailscale enabled.
CVSS 3.1 CRITICAL 9.6· Adjacent network · No auth · No interaction · EPSS 0.00432 · Published 2025-03-31 · Fixed in 7.0.1 CWE-289
Priority MEDIUM 42
Unraid Update Request Path Traversal Remote Code Execution Vulnerability.
CVSS 3.0 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.0089 · Published 2026-03-13 · No fix listed CWE-22
Priority LOW 39
Unraid Authentication Request Path Traversal Authentication Bypass Vulnerability.
CVSS 3.0 HIGH 7.3· Network · No auth · No interaction · EPSS 0.00766 · Published 2026-03-13 · No fix listed CWE-22
Open these records in search → All records by CVSS severity
Critical2 High5 Medium0 Low0 No CVSS0