CVE-2020-5847 - Unraid through 6.8.0 allows Remote Code Execution

CRITICAL KEV

Unraid through 6.8.0 allows Remote Code Execution

Published Mar 16, 2020 ·Due May 3, 2022

9.8

CRITICAL

CVSS 3.1

EPSS 95.84%

Unraid through 6.8.0 allows Remote Code Execution.

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

Link	Providers	Tags
http://packetstormsecurity.com/files/157275/Unraid-6.8.0-Authentication-Bypass-Arbitrary-Code-Execution.html		x_refsource_MISCExploitThird Party AdvisoryVDB Entry
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-27001		Advisory
https://forums.unraid.net/forum/7-announcements/		x_refsource_MISCRelease NotesVendor Advisory
https://sysdream.com/news/lab/		x_refsource_MISCThird Party Advisory
https://sysdream.com/news/lab/2020-02-06-cve-2020-5847-cve-2020-5849-unraid-6-8-0-unauthenticated-remote-code-execution-as-root/		x_refsource_MISCBroken LinkExploitThird Party Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-5847		government-resourceUS Government Resource

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Mar 16, 2020

Updated Oct 21, 2025

Reserved Jan 6, 2020

CISA Vulnrichment

Updated Feb 4, 2025

NVD

Status Analyzed

Modified Jun 17, 2026

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Mar 16, 2020

Updated Oct 21, 2025

Exploited since Nov 3, 2021

GitHub

No data