Raspap Raspap vulnerabilities

• raspap raspap-webgui RaspAP raspap-webgui sudo Configuration PluginInstaller.php addSudoers privileges management CVE-2026-101860 8.7 HighSeptember 29, 2026
• raspap raspap-webgui RaspAP raspap-webgui OpenVPN Configuration del_ovpncfg.php escapeshellcmd os command injection CVE-2026-101859 5.3 MediumSeptember 29, 2026
• raspap raspap-webgui RaspAP raspap-webgui SSID Processing WiFiManager.php writeWpaSupplicant os command injection CVE-2026-101858 5.1 MediumSeptember 29, 2026
• raspap raspap-webgui RaspAP raspap-webgui contains an OS Command Injection vulnerability CVE-2026-24788 Fix available 8.7 HighFebruary 2, 2026
• raspap raspap-webgui In RaspAP raspap-webgui 3.3.2 and earlier, a command injection vulnerability exists in the... CVE-2025-50428 Public exploit 9.8 CriticalAugust 27, 2025
• raspap raspap-webgui raspap-webgui has a Directory Traversal vulnerability CVE-2025-44163 Fix available 6.3 MediumJune 27, 2025
• raspap raspap-webgui In RaspAP raspap-webgui 3.0.9 and earlier, a command injection vulnerability exists in the... CVE-2024-36622 9.8 CriticalNovember 29, 2024
• raspap RaspAP allows an attacker to escalate privileges CVE-2024-41637 8.3 HighJuly 29, 2024
• raspap, raspap raspap-webgui +1 more RaspAP raspap-webgui HTTP POST Request provider.php code injection CVE-2024-2497 4.7 MediumMarch 15, 2024
• raspap raspap-webgui vulnerable to denial of service CVE-2024-28754 Fix available 7.5 HighMarch 8, 2024
• raspap RaspAP (aka raspap-webgui) through 3.0.9 allows remote attackers to read the /etc/passwd file via... CVE-2024-28753 6.5 MediumMarch 8, 2024
• raspap RaspAP Command Injection vulnerability CVE-2022-39987 Fix available EPSS 37.3% 8.8 HighAugust 1, 2023
• raspap RaspAP Command Injection vulnerability CVE-2022-39986 Public exploitFix available EPSS 99.1% 9.8 CriticalAugust 1, 2023
• raspap RaspAP raspap-webgui Command Injection vulnerability CVE-2023-30260 Fix available 8.8 HighJune 23, 2023
• raspap Command Injection in RaspAP 2.6.6 CVE-2021-38556 EPSS 13.0% 8.8 HighAugust 24, 2021
• raspap raspap-webgui in RaspAP 2.6.6 allows attackers to execute commands as root because of the insecure sudoers permissions. CVE-2021-38557 8.8 HighAugust 24, 2021
• raspap Multiple vulnerabilities exist in RaspAP 2.3 to 2.6.5 in the "interface", "ssid" and ... CVE-2021-33358 8.8 HighJune 9, 2021
• raspap A vulnerability exists in RaspAP 2.6 to 2.6.5 in the "iface" GET parameter in /ajax/networking... CVE-2021-33357 EPSS 17.4% 9.8 CriticalJune 9, 2021
• raspap Multiple privilege escalation vulnerabilities in RaspAP 1.5 to 2.6.5 could allow an authenticated... CVE-2021-33356 8.8 HighJune 9, 2021
• raspap An issue was discovered in includes/webconsole.php in RaspAP 2.5. With authenticated access, an... CVE-2020-24572 Public exploit 8.8 HighAugust 24, 2020