PULSE
ES
FEED
ransomwallstreet reclama a TGM Manufacturing, Inc · US · Manufacturingransomqilin reclama a Segres Systec · ES · Technologyransomqilin reclama a Shield Wall Systems of Florida · US · Government & Defenseransomqilin reclama a The Excalibur Group · US · Otherransomiah6477 reclama a hilmar-cheese · US · Agriculture and Food Productionransomn0n reclama a Company #70 · EG · Not Foundransomn0n reclama a Company #73 · Not Foundransomlockbit5 reclama a torcivialaw.com · IT · Professional Servicesransomlockbit5 reclama a kidzrkooldental.com · US · Healthcareransomlockbit5 reclama a lcww.com.eg · EG · Not Foundransomlockbit5 reclama a neweramachines.com · US · Manufacturingransomlockbit5 reclama a grupoabg.com · MX · Manufacturingransomqilin reclama a KD Corp · KR · Not Foundransomakira reclama a Videk · GB · Technologyransomwallstreet reclama a TGM Manufacturing, Inc · US · Manufacturingransomqilin reclama a Segres Systec · ES · Technologyransomqilin reclama a Shield Wall Systems of Florida · US · Government & Defenseransomqilin reclama a The Excalibur Group · US · Otherransomiah6477 reclama a hilmar-cheese · US · Agriculture and Food Productionransomn0n reclama a Company #70 · EG · Not Foundransomn0n reclama a Company #73 · Not Foundransomlockbit5 reclama a torcivialaw.com · IT · Professional Servicesransomlockbit5 reclama a kidzrkooldental.com · US · Healthcareransomlockbit5 reclama a lcww.com.eg · EG · Not Foundransomlockbit5 reclama a neweramachines.com · US · Manufacturingransomlockbit5 reclama a grupoabg.com · MX · Manufacturingransomqilin reclama a KD Corp · KR · Not Foundransomakira reclama a Videk · GB · Technology
← All CVEs
CVE Watch—

CVE-2020-5847

Unraid Remote Code Execution Vulnerability

CVSS

—

No CVSS

EPSS

95.8%

p100

KEV

YES

Nov 3, 2021

Exploit Today

80

0-100

Published: — · Last modified: —

EPSS · 30d
95.8%EPSS · 30 days95.8%
2026-09-172026-10-14
KEV catalog record

Product

Unraid / Unraid

Vulnerability

Unraid Remote Code Execution Vulnerability

Added to KEV

Nov 3, 2021

Remediate by

May 3, 2022

Known ransomware use

No

Summary description

Unraid contains a vulnerability due to the insecure use of the extract PHP function that can be abused to execute remote code as root. This CVE is chainable with CVE-2020-5849 for initial access.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2020-5847

Related CVEs
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2020-5849—
99.8%
KEV—80Unraid Authentication Bypass Vulnerability—