CVE-2020-5849
Unraid Authentication Bypass Vulnerability
Published Mar 16, 2020 · updated Jun 16, 2026 · unraid unraid
Unraid contains an authentication bypass vulnerability that allows attackers to gain access to the administrative interface. This CVE is chainable with CVE-2020-5847 for remote code execution.
Timeline
Detection, updates, and resolution for this record.
Mar 16, 2020 · Catalog
Detected
Unraid contains an authentication bypass vulnerability that allows attackers to gain access to the administrative interface. This CVE is chainable with CVE-2020-5847 for remote code execution.
Nov 3, 2021 · CISA KEV
Known exploited
Apply updates per vendor instructions.
May 3, 2022 · CISA KEV
Remediation due
Apply updates per vendor instructions.
Jun 16, 2026 · Catalog
Updated
Unraid contains an authentication bypass vulnerability that allows attackers to gain access to the administrative interface. This CVE is chainable with CVE-2020-5847 for remote code execution.
Required action
Apply updates per vendor instructions.
CISA due date May 3, 2022
Affected
- cpe unraid/unraid6.8.0
- vendor Unraid Unraidversion unspecified
Sources
- CISA KEVCVE-2020-5849
Unraid contains an authentication bypass vulnerability that allows attackers to gain access to the administrative interface. This CVE is chainable with CVE-2020-5847 for remote code execution.
cisa.gov - CVE.orgCVE-2020-5849
Official CVE identifier
cve.org - FIRST EPSSCVE-2020-5849
30-day exploitation probability 93.2%
first.org - Exploit Database48353
Public archive entry. The exploit body is not stored here.
exploit-db.com - Metasploit Modulesexploit_linux/http/unraid_auth_bypass_exec
Public module reference (excellent). Module source is not copied into this catalog.
rapid7.com - NIST NVDCVE-2020-5849
Unraid 6.8.0 allows authentication bypass.
nvd.nist.gov - Packet Storm Securityhttp://packetstormsecurity.com/files/157275/Unraid-6.8.0-Authentication-Bypass-Arbitrary-Code-Execution.html
Packet Storm link already published on the finding.
packetstormsecurity.com