CVE-2026-3838Disclosure(unraid / unraid)

LOWCVSS 8.8 · HIGH

Exploit discussion active in current signal (2 latest mentions)

Immediate actions

Patch unraid unraid systems immediately
Hunt for exploitation attempts and persistence artifacts
Increase monitoring for publicly documented tradecraft

Recommended action window: High priority (within 72h)

NVD description

Unraid Update Request Path Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Unraid. Authentication is required to exploit this vulnerability. The specific flaw exists within the update.php file. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-28951.

unraid CVEs Back to dashboard

2.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://www.zerodayinitiative.com/advisories/ZDI-26-171/

Weakness type (CWE)

CWE-22

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

unraid

Threat summary

Public PoC is present in monitored signal
Patch or workaround signal is available
4 mentions across 3 observed days
Momentum state: stable

What's happening

PoC mentioned or linked in 1 signal
Patch or workaround mentioned in 1 signal
Technical details provided in 4 signals
Disclosure: 3 classified signals
Peaked at 2 mentions on most recent observed day (2026-03-16)
4 total mentions across 3 days

Affected systems

Vendors

unraid

Products

unraid

1 version affected across 1 product

Deep dive

Activity timeline4 mentions / 3d

Signal classification2 categories

Disclosure

375.0%

Patch

125.0%

Referenced assets4 URLs

By indicator

Classification over time

Date	Total	Labels

2026-03-10	1	Disclosure1
2026-03-13	1	Disclosure1
2026-03-16	2	Disclosure1Patch1

Full discourse4 posts

The Hacker Wire@TheHackerWire206d
Disclosure
🟠 CVE-2026-3838 - High Unraid Update Request Path Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Unraid. Authenticati... https://www.thehackerwire.com/vulnerability/CVE-2026-3838/ https://t.co/rrKoKqJqv0
Post summary
The tweet announces a high‑severity Path Traversal Remote Code Execution weakness (CVE‑2026‑3838) affecting Unraid installations, providing basic technical details but no PoC, exploit code, or mitigation information.
0001062
136 followersView on X
CVEFind.com@CveFindCom206d
Patch
[CVE-2026-3838: HIGH] Critical Unraid update needed due to path traversal remote code execution vulnerability. Attackers can execute code on affected systems. Update.php file lacks path validation. Authenticat...#cve,CVE-2026-3838,#cybersecurity https://cvefind.com/CVE-2026-3838
Post summary
The tweet reports a path‑traversal RCE vulnerability in Unraid and urges an urgent update, but does not mention active exploitation or a PoC.
0000035
601 followersView on X
CVE@CVEnew208d
Disclosure
CVE-2026-3838 Unraid Update Request Path Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations… https://www.cve.org/CVERecord?id=CVE-2026-3838
Post summary
The text announces CVE-2026-3838 as a path traversal flaw that allows remote code execution on Unraid, providing a brief technical description and linking to the CVE record for further details.
00000169
56.7K followersView on X
TheZDIBugs@TheZDIBugs211d
Disclosure
[ZDI-26-171|CVE-2026-3838] Unraid Update Request Path Traversal Remote Code Execution Vulnerability (CVSS 8.8; Credit: Nicolas Chatelain (Nicocha30)) https://www.zerodayinitiative.com/advisories/ZDI-26-171/
Post summary
The post announces CVE‑2026‑3838, a path‑traversal RCE flaw in Unraid with a CVSS of 8.8, and links to a Zero Day Initiative advisory for further technical details.
00000646
5.4K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
OS	unraid	unraid	7.2.3	-	-

Explore more

Back to dashboard unraid CVEs unraid vulnerabilities

What researchers are saying

CVE-2026-3838

The Hacker Wire@TheHackerWireDisclosure

The tweet announces a high‑severity Path Traversal Remote Code Execution weakness (CVE‑2026‑3838) affecting Unraid installations, providing basic technical details but no PoC, exploit code, or mitigation information.

CVEFind.com@CveFindComPatch

The tweet reports a path‑traversal RCE vulnerability in Unraid and urges an urgent update, but does not mention active exploitation or a PoC.

CVE@CVEnewDisclosure

The text announces CVE-2026-3838 as a path traversal flaw that allows remote code execution on Unraid, providing a brief technical description and linking to the CVE record for further details.

TheZDIBugs@TheZDIBugsDisclosure

The post announces CVE‑2026‑3838, a path‑traversal RCE flaw in Unraid with a CVSS of 8.8, and links to a Zero Day Initiative advisory for further technical details.