Login Request a demo
RA
Product
raspap-webgui
by RaspAP · last CVE Sep 29, 2026
7
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities7In the news0Timeline
Severity mix
Critical 2High 2Medium 3Low 0
Severity
All severities7Critical2High2Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add raspap-webgui to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-50428
9.8
2%
Aug 27
In RaspAP raspap-webgui 3.3.2 and earlier, a command injection vulnerability exists in the includes/hostapd.php script
Affected: through 3.3.2
CVE-2024-36622
9.8
3%
Nov 29
In RaspAP raspap-webgui 3.0.9 and earlier, a command injection vulnerability exists in the clearlog.php script
Affected: through 3.0.9
CVE-2026-101860
8.8
0%
Sep 29
RaspAP raspap-webgui sudo Configuration PluginInstaller.php addSudoers privileges management
Affected: 3.5.0; 3.5.1; 3.5.2; 3.5.3; 3.5.4; 3.5.5
CVE-2026-24788
8.8
1%
Feb 2
RaspAP raspap-webgui versions prior to 3.3.6 contain an OS command injection vulnerability
Affected: versions prior to 3.3.6
CVE-2025-44163
6.3
1%
Jun 27
RaspAP raspap-webgui 3.3.1 is vulnerable to Directory Traversal in ajax/networking/get_wgkey.php
Affected: 3.3.1
CVE-2026-101859
5.4
2%
Sep 29
RaspAP raspap-webgui OpenVPN Configuration del_ovpncfg.php escapeshellcmd os command injection
Affected: 3.5.0; 3.5.1; 3.5.2; 3.5.3; 3.5.4; 3.5.5
CVE-2026-101858
4.7
3%
Sep 29
RaspAP raspap-webgui SSID Processing WiFiManager.php writeWpaSupplicant os command injection
Affected: 3.5.0; 3.5.1; 3.5.2; 3.5.3; 3.5.4; 3.5.5
Showing 7