Unraid 2

Organization

CVE-2020-5847: Unraid Remote Code Execution Vulnerability

Known Exploited Vulnerabilities CISA KEV Catalog Nov 03, 2021

Unraid contains a vulnerability due to the insecure use of the extract PHP function that can be abused to execute remote code as root. This CVE is chainable with CVE-2020-5849 for initial access.

Vulnerabilities & Patching

CVE-2020-5849: Unraid Authentication Bypass Vulnerability

Known Exploited Vulnerabilities CISA KEV Catalog Nov 03, 2021

Unraid contains an authentication bypass vulnerability that allows attackers to gain access to the administrative interface. This CVE is chainable with CVE-2020-5847 for remote code execution.

Vulnerabilities & Patching