What’s Vulnerable › Vulnerabilities

CVE-2025-56798

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-08-26 · updated 2026-10-26
• Weakness: CWE-352

Description

Cross-Site Request Forgery (CSRF) vulnerability in Lime Technology, Inc.'s Unraid OS version 6.12.14 and earlier allows remote attackers to escalate privileges via the Unraid authentication cookie's lax same-site policy.

References

• https://alittleinsecure.com/raiding-unraid/
• https://alittleinsecure.com/unraid-research/
• https://unraid.net/blog/cvd
• https://alittleinsecure.com/raiding-unraid/

Get alerted when CVE-2025-56798 or the next vulnerability affects your stack