By vendor

Unraid vulnerabilities

Known CVEs affecting Unraid products, prioritized by severity, with SEC.co remediation and detection guidance.

2 published vulnerabilities

• CVE-2026-9772HIGH 8.8

  Unraid, a popular NAS and virtualization platform, contains a remote code execution vulnerability in its web server that allows authenticated users to run arbitrary commands on the underlying system. The flaw resides in the file upload handler and stems from insufficient validation of user input before it's passed to a system command. An attacker with valid credentials could exploit this to gain code execution as the www-data user, potentially compromising the entire Unraid installation and any data or VMs it hosts.

• CVE-2026-9773HIGH 8.8

  Unraid, a storage and virtualization platform, contains a remote code execution vulnerability in its web server. An authenticated user can craft a malicious request to the ToggleState component that bypasses input validation, allowing them to run arbitrary system commands on the server. The attacker executes code with the privileges of the www-data user (the web server process), potentially compromising the entire Unraid installation and any data it manages.