Products: 2
    Vulnerabilities: 19
    Known Exploited: 0
    4
    Critical Level Threats
    10
    High Level Threats
    5
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-101860

    RaspAP raspap-webgui sudo Configuration PluginInstaller.php addSudoers privileges management

    Last Modified: Sep 29, 2026
    Published: Sep 29, 2026

    CVE-2026-101859

    RaspAP raspap-webgui OpenVPN Configuration del_ovpncfg.php escapeshellcmd os command injection

    Last Modified: Oct 01, 2026
    Published: Sep 29, 2026

    CVE-2026-101858

    RaspAP raspap-webgui SSID Processing WiFiManager.php writeWpaSupplicant os command injection

    Last Modified: Sep 29, 2026
    Published: Sep 29, 2026

    CVE-2026-24788

    RaspAP raspap-webgui versions prior to 3.3.6 contain an OS command injection vulnerability. If exploited, an arbitrary OS command may be executed by a user who can log in to the product.

    Last Modified: Jun 18, 2026
    Published: Feb 02, 2026

    CVE-2025-50428

    In RaspAP raspap-webgui 3.3.2 and earlier, a command injection vulnerability exists in the includes/hostapd.php script. The vulnerability is due to improper sanitizing of user input passed via the interface parameter.

    Last Modified: Sep 09, 2025
    Published: Aug 27, 2025
    Items Per Page
    Raspap Vulnerabilities & Security CVEs | CVE-DB