CVE-2020-5849
Unraid Authentication Bypass Vulnerability
CVSS
—
No CVSS
EPSS
93.2%
p100
KEV
YES
Nov 3, 2021
Exploit Today
80
0-100
Published: — · Last modified: —
93.2%EPSS · 30 days93.2%
2026-06-302026-07-16
Product
Unraid / Unraid
Vulnerability
Unraid Authentication Bypass Vulnerability
Added to KEV
Nov 3, 2021
Remediate by
May 3, 2022
Known ransomware use
No
Summary description
Unraid contains an authentication bypass vulnerability that allows attackers to gain access to the administrative interface. This CVE is chainable with CVE-2020-5847 for remote code execution.
Required action
Apply updates per vendor instructions.
Notes
https://nvd.nist.gov/vuln/detail/CVE-2020-5849
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2020-5847—99.9%
KEV—80Unraid Remote Code Execution Vulnerability—