What’s Vulnerable › Vulnerabilities
CVE-2020-5847: Unraid Remote Code Execution Vulnerability
- Severity: critical (CVSS 9.8 v3.1)
- Exploited in the wild: yes — in CISA KEV since 2021-11-03
- EPSS: 95.8% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2020-03-16 · updated 2026-06-17
Description
Unraid through 6.8.0 allows Remote Code Execution.
Affected products
- Unraid: through 6.8.0
References
- http://packetstormsecurity.com/files/157275/Unraid-6.8.0-Authentication-Bypass-Arbitrary-Code-Execution.html
- https://forums.unraid.net/forum/7-announcements/
- https://sysdream.com/news/lab/
- https://sysdream.com/news/lab/2020-02-06-cve-2020-5847-cve-2020-5849-unraid-6-8-0-unauthenticated-remote-code-execution-as-root/
- http://packetstormsecurity.com/files/157275/Unraid-6.8.0-Authentication-Bypass-Arbitrary-Code-Execution.html
- https://forums.unraid.net/forum/7-announcements/
- https://sysdream.com/news/lab/
- https://sysdream.com/news/lab/2020-02-06-cve-2020-5847-cve-2020-5849-unraid-6-8-0-unauthenticated-remote-code-execution-as-root/
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-5847
Get alerted when CVE-2020-5847 or the next vulnerability affects your stack