{"uuid": "bdde4e07-5b0c-4105-9873-920a830329eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5849", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/unraid_auth_bypass_exec.rb", "content": "{\"aliases\": [], \"arch\": \"php\", \"author\": [\"Nicolas CHATELAIN \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits two vulnerabilities affecting Unraid 6.8.0.\\n          An authentication bypass is used to gain access to the administrative\\n          interface, and an insecure use of the extract PHP function can be abused\\n          for arbitrary code execution as root.\", \"disclosure_date\": \"2020-02-10\", \"fullname\": \"exploit/linux/http/unraid_auth_bypass_exec\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:55:15 +0000\", \"name\": \"Unraid 6.8.0 Auth Bypass PHP Code Execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/linux/http/unraid_auth_bypass_exec.rb\", \"platform\": \"PHP\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"linux/http/unraid_auth_bypass_exec\", \"references\": [\"CVE-2020-5847\", \"CVE-2020-5849\", \"URL-http://web.archive.org/web/20220520205905/https://sysdream.com/news/lab/2020-02-06-cve-2020-5847-cve-2020-5849-unraid-6-8-0-unauthenticated-remote-code-execution-as-root/\", \"URL-http://web.archive.org/web/20230330210936/https://forums.unraid.net/topic/88253-critical-security-vulnerabilies-discovered/\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Automatic\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:00.589991Z"}