CVE-2020-5847—Unraid Remote Code Execution Vulnerability

PUBLISHEDvulnerability record

2021-11-03 · last modified June 21, 2025

Metadata

CVE ID:: CVE-2020-5847
Project:: Unraid
Product:: Unraid
Date Added:: 2021-11-03
Due Date:: 2022-05-03
Last Updated:: June 21, 2025

Vulnerability Name

Unraid Remote Code Execution Vulnerability

Description

Unraid contains a vulnerability due to the insecure use of the extract PHP function that can be abused to execute remote code as root. This CVE is chainable with CVE-2020-5849 for initial access.

Known To Be Used in Ransomware Campaigns?

Ransomware Status:: Unknown

Action

Apply updates per vendor instructions.

Additional Notes

browse all CVEs