CVE-2026-9773 | Unraid ToggleState.php os command injection (ZDI-26-386 / 1161ec120)

June 25, 2026 Yanac

A vulnerability was found in Unraid. It has been declared as critical. The affected element is an unknown function of the file ToggleState.php. Such manipulation leads to os command injection.

This vulnerability is referenced as CVE-2026-9773. It is possible to launch the attack remotely. No exploit is available.

A patch should be applied to remediate this issue.VulDB Recent EntriesRead More