Vulnerabilities in RaspAP
5 resultsCVE-2026-101858MEDIUMRaspAP raspap-webgui SSID Processing WiFiManager.php writeWpaSupplicant os command injectionEPSS 2.5%CVE-2026-101859MEDIUMRaspAP raspap-webgui OpenVPN Configuration del_ovpncfg.php escapeshellcmd os command injectionEPSS 1.6%CVE-2026-24788HIGHRaspAP raspap-webgui versions prior to 3.3.6 contain an OS command injection vulnerability. If exploited, an arbitrary OS command may be exeEPSS 1.4%CVE-2024-2497MEDIUMRaspAP raspap-webgui HTTP POST Request provider.php code injectionEPSS 0.9%CVE-2026-101860HIGHRaspAP raspap-webgui sudo Configuration PluginInstaller.php addSudoers privileges managementEPSS 0.5%