Unraid

Records7All Threatist records

Exploited (KEV)2In CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high5CVSS 7.0–8.9

Exploited now

Unraid records in CISA KEV

Products in the NVD configurations · select one to filter the records

6 records in Unraid · all components

TI-2020-04767 CVE-2020-5847 · GHSA-4m4g-xmmp-5cj6

CRITICAL 100KEV

Unraid through 6.8.0 allows Remote Code Execution.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.95844 Published 2020-03-16 No fix listed

TI-2020-04768 CVE-2020-5849 · GHSA-9qh4-892p-xcm7

CRITICAL 90KEV

Unraid 6.8.0 allows authentication bypass.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.93243 Published 2020-03-16 No fix listed CWE-697

TI-2026-08564 CVE-2026-9773 · GHSA-59jp-p2r5-hfpj

MEDIUM 44

Unraid Web Server ToggleState Command Injection Remote Code Execution Vulnerability.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01888 Published 2026-06-24 No fix listed CWE-78

TI-2026-08563 CVE-2026-9772 · GHSA-mg2m-r63r-jgvm

MEDIUM 44

Unraid Web Server FileUpload Command Injection Remote Code Execution Vulnerability.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01888 Published 2026-06-24 No fix listed CWE-78

TI-2026-03324 CVE-2026-3838 · GHSA-fx8c-7359-vxr3

MEDIUM 42

Unraid Update Request Path Traversal Remote Code Execution Vulnerability.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.0089 Published 2026-03-13 No fix listed CWE-22

TI-2026-03325 CVE-2026-3839 · GHSA-hv24-53jm-mrp5

LOW 39

Unraid Authentication Request Path Traversal Authentication Bypass Vulnerability.

CVSS 3.0HIGH 7.3 Network No auth No interaction EPSS 0.00766 Published 2026-03-13 No fix listed CWE-22