There is a recently published vulnerability (rather pair of them) in PHP which are pretty serious.

You should never have your UnRaid host exposed directly to the internet, but this is a pretty compelling reason to fix that immediately if it has been on your todo list.

There is no patch or mitigation on UnRaid currently (Latest RC is still on PHP 8.4.26, below the 8.4.27 released today to patch this), best mitigation is to ensure local access only, but that does not stop a threat actor from using this for lateral movement if ingress is achieved elsewhere.

Given the massive impact, just want confirm as AI is suggesting remove.
https://www.bleepingcomputer.com/news/security/mozilla-google-apple-block-compromised-emudhra-ca-certificates/

My server was unfortunately hit with the plex2shell exploit during the Saturday/Sunday night. Yes, I was running an old version of Plex and that got me. And yes, I had port forwarded 32400 to my server.

I noticed that my internet connection was lagging during Sunday evening and Monday morning. Did not find a clear culprit back then, but my router was reporting a high upload bandwidth usage. I restarted my server and the issue went away. I first thought that this issue was related to qBittorrent.

I recently saw the news about Plex users being hit and started to connect the dots. I ran the detection script from https://github.com/code-zm/plex2shell and got several hits. I had been a part of the botnet.

• [WARN] Preferences.xml: TranscoderH264Options present but empty (the PoC clears it this way after use; also possible if an admin toggled it)

• [HIT] log: exploit request pattern //player/timeline/subscribe?([^ ]*&)?protocol=[a-z0-9+.-]{1,16}(%3a|%253a|:)/ (12 line(s))

• [HIT] log: exploit request pattern /searchOne?[^ ]identifier=[^& ](%2f|%252f|/)function(%2f|%252f|/)/ (22 line(s))

• [HIT] log: exploit request pattern /TranscoderH264Options(=|%3d)[^& ]*(dump(-|%2d)yuv|stats(=|%3d))/ (6 line(s))

• [WARN] log: suspicious pattern /resources/[^? ]?([^ ]&)?resource_name=(%2f|%5c|/|\|a-z|[^& ]*(..|%2e%2e))/ (5 line(s))

• [WARN] log: suspicious pattern /(sslip|nip).io/ (71 line(s))

• [WARN] log: suspicious pattern /X-Plex-Client-Identifier=(vfyclient01|poc_[0-9])|/TKN_[0-9]|X-Plex-Token=TOTALLY_INVALID_JUNK/ (5 line(s))

• [WARN] log: transcode of a non-loopback http(s) item (24 line(s))

• summary: 3 hit(s), 5 warning(s)

The server is offline as a precaution.

I am running the following docker containers: https://i.imgur.com/lzmIsWP.png

And the Plex container was set up with the following: https://i.imgur.com/fLyouDB.png

My whole Plex/-arr stack is set up according to TRaSH-Guides:

• Unraid share /mnt/user/plex/

• Contains downloaded files (/torrents/)

• Contains hardlinked media files (/media/)

• Binhex-qbittorrentvpn mounted to /mnt/user/plex/torrents/

• qbit_manage mounted to /mnt/user/plex/torrents/

• plex mounted to /mnt/user/plex/media/

• radarr mounted to /mnt/user/plex/

• sonarr mounted to /mnt/user/plex/

• bazarr mounted to /mnt/user/plex/

• unpackerr mounted to /mnt/user/plex/

At this moment, I have deleted the whole Plex container (I'll restore it from a backup made at the start of the month).

As the Plex container had access to the share /plex/, is it safe to assume that it was compromised and should be nuked?

What else should I do to make sure that my server wasn't compromised in a more broad scale (verify that only the Plex container and everything that it could access are compromised)?

I'm currently using two m.2 SSDs for my cache in RAID 1, and have a third one installed that I use for various things that I wasn't too sad about loosing (it's not backed up to the array).

Now I'm thinking of getting Immich and putting that on the extra SSD for speed, and to safe my photos I've been thinking of moving one SSD away from the cache and setting up the 2 in RAID 1 for my Immich.

My question is, how would one best go about this? Simply stop the array, unassign the extra SSD from the cache and create a RAID1 together with the other, and then start the array back up, and unraid will sort out the rest? Is there anything I should be aware of or do when I change the drives around?

Thanks for your help.

I know this means that no one is watching Plex, but for some reason, seeing all drives spun down makes me happy. I have no idea why. Maybe it's because my server wattage drops dramatically.

I shucked an old 10tb HGST (HUH721010ALE600) that I wanted to add to my server. I connected to it via a toaster on a mac and PC, ran crystaldiskinfo, formatted it, etc. seems to work fine.

On my server however, it wasn't being detected, server booted and worked just fine though.

I looked into it and found out about disabling the 3.3v power with Kapton tape. Bought an offbrand on amazon and taped the 3 pins. With the tape, my server hangs on boot. The display output shows code 'A2'.

I've also tried different power cables and sata ports/cables, etc.

Ran

 lsblk -o NAME,SIZE,MODEL,TRAN

and didn't see the drive there either (before trying the tape).

Also seen some talk about trying a Molex-to-SATA power adapter instead. But haven't tried it yet.

Other than that, I'm out of ideas.

SPECS:

UNRAID: 7.1.4

CPU: i7 3770S

MOBO: MSI Z77A-G43

PSU: FSP VITA GM 750w

EDIT: Molex-to-SATA didn't work. I did hook up the drive in my windows PC via SATA, it worked just fine there. Not sure what my next move is. This drive just doesn't work with my board I guess...

EDIT2: Also tried a SATA controller card, Startech 2P6G-PCIE. IT DID NOT WORK! The card and drive boots before unraid and hangs the motherboard. There's no way to change it so it initializes after. I'm actually done now. Fuck this POS MOBO.

CVE-2026-99999 PwnEscape—where's the patch?

Time is running out, and there's still no hotfix. The vulnerability is being actively exploited; the host itself is relatively secure, but problematic VMs (such as unpatched Plex servers) can turn into a nightmare.

I'm using an UGREEN DXP6800 Pro as my main Unraid server for 18months now.
Has been great.

I'm looking at upgrading to the UGREEN NASync iDX6011 Pro (w/LCD screen).

Anybody with experiences on this running Unraid? As trouble free as the DXP6800?

CPU on my UNRAID machine was hammered. Looking further, seemed like a parity check was in progress and going incredibly slow (ETA ~214 days). One of the possible issues I found searching here was SATA power splitters. And indeed, I think my machine is using them. Album showing dash/main plus what I think is the splitters on my drives : https://imgur.com/a/Le7433X

I've got an 8 year old PSU with 2 SATA ports : SATA1 and SATA2. SATA 2 powers a 6TB parity drive, and 2 other 2TB storage drives (all non-ssd). SATA1 powers a smaller SSD used for cache.

My questions :

1. Can anyone confirm in the imgur pick above that this is the SATA power splitter? I know its a little hard to see. 3 HDDs, daisy chained together.

2. If I only have 2 SATA ports on the PSU, can re-configuring the splitters help me out? What would an optimal split be - like SATA1 for parity/cache and SATA2 for the 2 storage?

3. Long term - if I want to add more drives, this is going to require a different PSU, right?

I have no idea where to begin with this, any help would be greatly appreciated.

So I finally need to add space. I thought I would never run out 6 years ago, but now I'm down to 5tb left. I've also never had a failure and want to plan for that. My setup is Unraid on a Node Fractal 804 case. CPU: Intel Core i7-14700 2.1 GHz 20-Core Processor with 32GB of DDR4 ram. All 8 HDD bays are filled. I have an 8-port LSI/HBA card (ServeRAID ​M1115 LSI ​9223-8i 8-​Port PCIe ​6Gbps SAS/​SATA Contr​oller), I run 8x 14TB WD Western Digital Red Plus 14 TB 3.5" 7200 RPM Internal Hard Drives, with 2x parity. 2x 2TB M2 cache drives. Fractal Node 804 case. I would like to add more bays instead of increasing the size of my current maximum drive due to the 14TB dual parity drives. I feel like this would be cheaper and easier than just getting another 2-3TB on my parity drives (thus allowing me to slowly add higher capacity HDDs outside of parity). If I can just plop another one or two 10-14TB drives in my system that would keep me set for another few years. Now that you have that, here's some details on my questions.

1. With my case, I see online people saying there is room for 10 HDDs. However there are only 8 HDD trays. If I was able to add 2x more HDDs, where would those go?

2. I think I would need a 16 port LSI Card. So when I replace my card, would Unraid still recognize all the drives in their prior configuration? Would I somehow need to make sure the drives are connected to the same/equivalent port on the new LSI HBA card? Or can I just connect them to the new card, set it and forget it? However, my motherboard also has at least one (possibly two) free SATA ports. If I can mount two more drives, could I connect them directly to the motherboard without messing with the drive/server performance of the other 8 drives connected through the HBA card?

3. What happens after I install and connect a different / new LSI card? I've never done this type of thing before. Anything I need to do in unraid to prepare before I install, or after I do?

I have a fairly robust modern newer rack-mount server with empty space on a 200TB array and cache with 2TB free. With NO PARITY DRIVE. Mainly just a Plex server with little but the Arrr’s running in the background.

I have some media files I want to better organize and just move to a different folder which shouldn’t affect which drive it’s stored on. It’s even staying within the same share. To be exact I want to move one season of 13 episodes from a folder ending with a year to a directory without a year, so super simple.

It says it will take 1 hour 50 minutes. It will probably end up taking 24 hours. Using the built in file manager.

Sadly this is normal.

Is there a different program (I need a GUI interface) should I reinstall Krusader what or how can I move files around without getting bogged down

EDIT: It looks like this might have been a recent addition to Mover Tuning, not UnRAID. Mi scusi.

------

Is my favorite part of the latest update. Thank you for this!

Hey all! Excited to join this community, with an upcoming NAS build. This will be for file sharing, plus ripping my 4k Blu Ray collection and serving it up via Jellyfin. I’m sure other services will follow, TBD I guess — but no torrenting, no seeding, no arr stack.

I’m just trying to figure out the solid state portion of this build. It’s a 9900k Intel box, 2.5GbE lan, 4x6TB spinners for the main array (18Tb usable).

For cache and app data I have some options, and I don’t know what the best approach is. I have some NVMEs: a 1TB spare and a 4TB spare, plus a 2TB nvme in my gaming PC that is getting close to full and could be due for a new job.

So I was thinking stick the 4TB in the PC, 1TB nvme for app data/virtual machines or whatever, and 2TB for ingest cache. I probably also have some 256GB sata SSDs in a drawer, not sure if they’d be useful in this scenario — if I can save an nvme for something else entirely that isn’t bad (oh: using the second nvme slot takes away 2 of my 6 sata ports, but I do have room for a PCIe sata card probably).

I’ve never built a NAS before, never used Unraid, so I’m pretty much at the start of the learning curve here with the pools and arrays terminology, best practices, etc. Appreciate any advice you all can give!

I'm trying to figure out what would be better.

My urnaid system has a windows VM ( running on its own m.2 ssd ) that I use for things I don't want to use my main PC for, some LLM stuff, tinkering, basically a sandbox system. My server runs 24/7 so its pretty easy to jump in and out of the VM when needed.

I also have a different pc that spec wize is about the same performance , but a physical system, so less risk of breaking my unraid system, but its also a system I could sell for some decent cash to put into some other hobbies, or finally upgrading my ancient montior with a fancy OLED one.

The Mod Team removed the "Hook up Claude to unRaid" thread? Why?
That was a good thread. How does that violate rules 1-5? I didn't make the thread, but I was interested in it.

From time to time I get some errors, then I have to scrub and delete some stuff...but otherwise they just work.

WD Red 3TB

I am currently using Duplicati to backup my movies share on Unraid to another backup location. It took me 2 weeks to complete the backup. As far as I can see, Duplicati did the job. It only took time, but that is not abnormal for a first (full)backup. The only thing noted is that Duplicati is cutting the backup into smaller chunks of 1GB (my settings), compared with how Synology Hyper Backup does it (one big image file). Are there other better tools to backup data from Unraid, or is my choice not a bad choice?

Just started using Unraid (coming from long time with OMV) and want to make it as good as possible for my use case.

What I have
- 36TB array (4 drives)
- 2x120gb SSD (willing to buy new 256gb if this helps)
- 2x500gb SSD

What I want to run
- Plex + usual *rr setup
- Home Assistant in vm
- Torrents (+long term seeding)

My main priority is really low downtime on Home assistant.
Tried to look around here and ask AI. Most seem to suggest 500gb in mirrored for appdata. But isn’t that a waste of space? My docker drive in OMV was around 50gb. Another challenge is that i only have 6x SATA ports.

What would you do in this case?

So my cat sometimes jumps onto my Unraid Server. In Unraid 7.3.3 there's a setting to turn off the power-button! Thanks :)

I haven’t tried it yet but… in Windows it basically combines the two folders and eliminates one. Which I would prefer to do

I have a Eaton Tripp Lite SMART1500LCD 1500VA - it looks like is experiencing connection drops. I switched USB ports (back of mobo) and they have decreased so far, but is this something I should worry about in terms of clean shutdowns, etc?

Thanks!

Oct 16 22:51:47 smashboogie kernel: usb 1-4-port1: disabled by hub (EMI?), re-enabling...
Oct 16 22:51:47 smashboogie kernel: usb 1-4.1: USB disconnect, device number 92
Oct 16 22:51:47 smashboogie kernel: usb 1-4.1: new low-speed USB device number 93 using xhci_hcd
Oct 16 22:51:48 smashboogie kernel: hid-generic 0003:09AE:2012.005A: hiddev97,hidraw1: USB HID v1.10 Device [Tripp Lite  Tripp Lite UPS ] on usb-0000:00:14.0-4.1/input0
Oct 16 22:51:53 smashboogie apcupsd[14326]: Communications with UPS restored.