This Metasploit module exploits two vulnerabilities affecting Unraid 6.8.0. An authentication bypass is used to gain access to the administrative interface, and an insecure use of the extract PHP function can be abused for arbitrary code execution as root.
35b12f162c0f93f5dcd8552c4530c13b6a4979bffe9b0558493c22aea31db7e7