UN
Product
Unraid
On CISA KEVExploited in the wild
6
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
VulnerabilityHigh
ZDI-26-385: Unraid Web Server FileUpload Command Injection Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Unraid. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2026-9772.
Jun 24, 2026·Zero Day Initiative
VulnerabilityHigh
ZDI-26-386: Unraid Web Server ToggleState Command Injection Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Unraid. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2026-9773.
Jun 24, 2026·Zero Day Initiative
VulnerabilityHigh
ZDI-26-172: Unraid Authentication Request Path Traversal Authentication Bypass Vulnerability
This vulnerability allows remote attackers to bypass authentication on affected installations of Unraid. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.3. The following CVEs are assigned: CVE-2026-3839.
Mar 9, 2026·Zero Day Initiative
VulnerabilityHigh
ZDI-26-171: Unraid Update Request Path Traversal Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Unraid. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2026-3838.
Mar 9, 2026·Zero Day Initiative