CVE-2026-9773

CVE-2026-9773 affects Unraid Web Server, specifically ToggleState.php, where unsafely used user-supplied input in a system call enables remote code execution. The vulnerability allows an attacker with authentication to execute arbitrary code with the www-data user context. The CVSS v3.0 base scor...