- Vendor / Project
- Unraid
- Product
- Unraid
- Date added
- Nov 3, 2021
- Due date
- May 3, 2022
- Known ransomware use
- Unknown
- CWEs
- —
Description
Unraid contains a vulnerability due to the insecure use of the extract PHP function that can be abused to execute remote code as root. This CVE is chainable with CVE-2020-5849 for initial access.
Required action
Apply updates per vendor instructions.