ZDI-26-171 HIGH 8.8 Published Mar 09, 2026

Unraid Update Request Path Traversal Remote Code Execution Vulnerability

Unraid

This vulnerability in Unraid (CVE-2026-3838) allows authenticated remote attackers to execute arbitrary code on affected systems, earning a HIGH severity rating of 8.8. While exploitation requires valid authentication credentials, successful attacks could give adversaries complete control over the Unraid installation. Security teams should prioritize patching Unraid systems immediately and review access controls to limit who can authenticate to these systems.

Related CVEs

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy