← Back to browse
·
API
CVE-2020-5849
Severity
HIGH
CVSS
7.5
EPSS
0.93243
Risk score
57.64
CISA KEV
Yes
PoC
No
Published
2020-03-16
Modified
2025-10-21
First seen
2026-08-07
Aliases
EUVD-2020-27003, GHSA-9QH4-892P-XCM7
Products
Unraid:Unraid, n/a:n/a n/a
Sources
cisa.gov
CVE-2020-5849
euvd
EUVD-2020-27003
Description
Unraid 6.8.0 allows authentication bypass.
References
https://www.cisa.gov/known-exploited-vulnerabilities-catalog
https://nvd.nist.gov/vuln/detail/CVE-2020-5849
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-27003
https://sysdream.com/news/lab/
https://forums.unraid.net/forum/7-announcements/
https://sysdream.com/news/lab/2020-02-06-cve-2020-5847-cve-2020-5849-unraid-6-8-0-unauthenticated-remote-code-execution-as-root/
http://packetstormsecurity.com/files/157275/Unraid-6.8.0-Authentication-Bypass-Arbitrary-Code-Execution.html