RaspAP vulnerabilities
5 published CVEs name RaspAP among the affected products.
- 5Published CVEs5 of them scored
- 4Last 12 monthspublished in the last year
- 0Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-101860
RaspAP raspap-webgui sudo Configuration PluginInstaller.php addSudoers privileges management
RaspAP · raspap-webgui
High8.7 - CVE-2026-101859
RaspAP raspap-webgui OpenVPN Configuration del_ovpncfg.php escapeshellcmd os command injection
RaspAP · raspap-webgui
Medium5.3 - CVE-2026-101858
RaspAP raspap-webgui SSID Processing WiFiManager.php writeWpaSupplicant os command injection
RaspAP · raspap-webgui
Medium5.1 - CVE-2026-24788
RaspAP raspap-webgui versions prior to 3.3.6 contain an OS command injection vulnerability. If exploited, an arbitrary OS command may be executed by a user who…
RaspAP · raspap-webgui
High8.7 - CVE-2024-2497
RaspAP raspap-webgui HTTP POST Request provider.php code injection
RaspAP · raspap-webgui
Medium4.7