CVE-2026-9772 | Unraid FileUpload.php os command injection (ZDI-26-385 / 1161ec120)

June 25, 2026 Yanac

A vulnerability has been found in Unraid and classified as critical. This vulnerability affects unknown code of the file FileUpload.php. The manipulation leads to os command injection.

This vulnerability is uniquely identified as CVE-2026-9772. The attack is possible to be carried out remotely. No exploit exists.

It is recommended to apply a patch to fix this issue.VulDB Recent EntriesRead More