What’s Vulnerable › Vulnerabilities
CVE-2020-5849: Unraid Authentication Bypass Vulnerability
- Severity: high (CVSS 7.5 v3.1)
- Exploited in the wild: yes — in CISA KEV since 2021-11-03
- EPSS: 93.2% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2020-03-16 · updated 2026-06-17
- Weakness: CWE-697
Description
Unraid 6.8.0 allows authentication bypass.
Affected products
- Unraid: 6.8.0
References
- http://packetstormsecurity.com/files/157275/Unraid-6.8.0-Authentication-Bypass-Arbitrary-Code-Execution.html
- https://forums.unraid.net/forum/7-announcements/
- https://sysdream.com/news/lab/
- https://sysdream.com/news/lab/2020-02-06-cve-2020-5847-cve-2020-5849-unraid-6-8-0-unauthenticated-remote-code-execution-as-root/
- http://packetstormsecurity.com/files/157275/Unraid-6.8.0-Authentication-Bypass-Arbitrary-Code-Execution.html
- https://forums.unraid.net/forum/7-announcements/
- https://sysdream.com/news/lab/
- https://sysdream.com/news/lab/2020-02-06-cve-2020-5847-cve-2020-5849-unraid-6-8-0-unauthenticated-remote-code-execution-as-root/
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-5849
Get alerted when CVE-2020-5849 or the next vulnerability affects your stack