Unraid records
6 published records for vendor unraid.
Researcher profile
- Entered KEV
- 2 · 33.3%
- Weaponized
- 2 · 33.3%
- Pre-auth RCE
- 1
- With a fix record
- 0%
- Median publish → KEV
- 597 days
Recurring classes
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')2
- CWE-697 Incorrect Comparison1
The weakness classes this vendor ships most often: where to look.
CWEAll records
6 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
98Now | CVE-2020-5847Weaponized | Unraid through 6.8.0 allows Remote Code Execution.unraid · unraid | Critical9.8 | KEV | 95.8% | Mar 16, 2020 |
88Now | CVE-2020-5849Weaponized | Unraid 6.8.0 allows authentication bypass.unraid · unraid · CWE-697 | High7.5 | KEV | 93.2% | Mar 16, 2020 |
36Monitor | CVE-2026-9772No exploit | Unraid Web Server FileUpload Command Injection Remote Code Execution Vulnerabilityunraid · unraid · CWE-78 | High8.8 | — | 1.9% | Jun 24, 2026 |
36Monitor | CVE-2026-9773No exploit | Unraid Web Server ToggleState Command Injection Remote Code Execution Vulnerabilityunraid · unraid · CWE-78 | High8.8 | — | 1.9% | Jun 24, 2026 |
35Monitor | CVE-2026-3838No exploit | Unraid Update Request Path Traversal Remote Code Execution Vulnerabilityunraid · unraid · CWE-22 | High8.8 | — | 1.1% | Mar 16, 2026 |
29Monitor | CVE-2026-3839No exploit | Unraid Authentication Request Path Traversal Authentication Bypass Vulnerabilityunraid · unraid · CWE-22 | High7.3 | — | 0.7% | Mar 16, 2026 |
- CVE-2020-584798Now
Unraid through 6.8.0 allows Remote Code Execution.
CriticalCVSS 9.8KEVWeaponizedEPSS 96%unraid · unraidMar 16, 2020
- CVE-2020-584988Now
Unraid 6.8.0 allows authentication bypass.
HighCVSS 7.5KEVWeaponizedEPSS 93%unraid · unraidMar 16, 2020
- CVE-2026-977236Monitor
Unraid Web Server FileUpload Command Injection Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 2%unraid · unraidJun 24, 2026
- CVE-2026-977336Monitor
Unraid Web Server ToggleState Command Injection Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 2%unraid · unraidJun 24, 2026
- CVE-2026-383835Monitor
Unraid Update Request Path Traversal Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 1%unraid · unraidMar 16, 2026
- CVE-2026-383929Monitor
Unraid Authentication Request Path Traversal Authentication Bypass Vulnerability
HighCVSS 7.3No exploitEPSS 1%unraid · unraidMar 16, 2026