← Back to CVE List

Vulnerability Intelligence Report

Unraid Authentication Bypass Vulnerability

CVE-2020-5849

Unraid 6.8.0 allows authentication bypass.

CISA KEV SSVC: Active Exploitation Automatable

CVSS Base Score

7.5

HIGH

Exploitability:3.9

Impact Score:3.6

EPSS Probability:93.15%

Executive Threat Verdict

Evaluating...

Evaluating Threat Landscape...

Assessing known weaponization, exploitation telemetry, and federal advisories.

Attack Surface

—

Authentication

—

Weaponization

—

SSVC Action

—

Weaknesses (CWE)

CWE-697 ↗CWE-697 Incorrect Comparison

Affected Products & Versions

Vendor	Product	Affected Versions
unraid	unraid	6.8.0

Exploitation & Remediation

References & Technical Advisories

NVD Listing ↗ MITRE Listing ↗ GitHub Advisory ↗

No reference links found.

Threat Intelligence Signals

CISA KEV

ACTIVE IN CATALOG

EPSS Score

93.151%

GitHub Advisory

GHSA-9qh4-892p-xcm7 ↗

CVSS Vector Breakdown

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality

Integrity

Availability

Identity & Timeline

Status	PUBLISHED
Assigning Authority	MITRE Corporation · N/A · USA
Reserved	2020-01-06T00:00:00
Published	2020-03-16T17:24:23
Last Updated	2025-10-21T23:35:48

MITRE ATT&CK Mapping

Tactics

Techniques

CVE-2020-5849

—

Public Weaponization & Exploit Code Exploit-DB Catalog

Weaknesses (CWE)

Affected Products & Versions

Exploitation & Remediation

References & Technical Advisories

Threat Intelligence Signals

CVSS Vector Breakdown

Identity & Timeline

SSVC Prioritization

MITRE ATT&CK Mapping

CVE-2020-5849

—

Public Weaponization & Exploit Code Exploit-DB Catalog

Weaknesses (CWE)

Affected Products & Versions

Exploitation & Remediation

References & Technical Advisories

Threat Intelligence Signals

CVSS Vector Breakdown

Identity & Timeline

SSVC Prioritization

MITRE ATT&CK Mapping

Community Chatter & Buzz

Related Intelligence

SHARE INTELLIGENCE WIRE