RA
Vendor
Raspap
19
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-101860 | RA raspap-webgui RaspAP | 8.8 | Sep 29 | RaspAP raspap-webgui sudo Configuration PluginInstaller.php addSudoers privileges management |
| CVE-2026-101859 | RA raspap-webgui RaspAP | 5.4 | Sep 29 | RaspAP raspap-webgui OpenVPN Configuration del_ovpncfg.php escapeshellcmd os command injection |
| CVE-2026-101858 | RA raspap-webgui RaspAP | 4.7 | Sep 29 | RaspAP raspap-webgui SSID Processing WiFiManager.php writeWpaSupplicant os command injection |
| CVE-2026-24788 | RA raspap-webgui RaspAP | 8.8 | Feb 2 | RaspAP raspap-webgui versions prior to 3.3.6 contain an OS command injection vulnerability |
| CVE-2025-50428 | RA Raspap-webgui Raspap | 9.8 | Aug 27 | In RaspAP raspap-webgui 3.3.2 and earlier, a command injection vulnerability exists in the includes/hostapd.php script |
| CVE-2025-44163 | RA Raspap-webgui Raspap | 6.3 | Jun 27 | RaspAP raspap-webgui 3.3.1 is vulnerable to Directory Traversal in ajax/networking/get_wgkey.php |
| CVE-2024-36622 | RA Raspap-webgui Raspap | 9.8 | Nov 29 | In RaspAP raspap-webgui 3.0.9 and earlier, a command injection vulnerability exists in the clearlog.php script |
| CVE-2024-2497 | RA Raspap Raspap | 7.2 | Mar 15 | A vulnerability was found in RaspAP raspap-webgui 3.0.9 and classified as critical |
| CVE-2024-28754 | RA Raspap Raspap | 7.5 | Mar 9 | RaspAP (aka raspap-webgui) through 3.0.9 allows remote attackers to cause a persistent denial of service (bricking) via a crafted request |
| CVE-2024-28753 | RA Raspap Raspap | 6.5 | Mar 9 | RaspAP (aka raspap-webgui) through 3.0.9 allows remote attackers to read the /etc/passwd file via a crafted request |
| CVE-2022-39987 | RA Raspap Raspap | 8.8 | Aug 1 | A Command injection vulnerability in RaspAP 2.8.0 thru 2.9.2 allows an authenticated attacker to execute arbitrary OS commands as root via the "entity" POST parameters in… |
| CVE-2022-39986 | RA Raspap Raspap | 9.8 | Aug 1 | A Command injection vulnerability in RaspAP 2.8.0 thru 2.8.7 allows unauthenticated attackers to execute arbitrary commands via the cfg_id parameter in… |
| CVE-2023-30260 | RA Raspap Raspap | 8.8 | Jun 23 | Command injection vulnerability in RaspAP raspap-webgui 2.8.8 and earlier allows remote attackers to run arbitrary commands via crafted POST request to hostapd settings form |
| CVE-2021-38557 | RA Raspap Raspap | 8.8 | Aug 24 | raspap-webgui in RaspAP 2.6.6 allows attackers to execute commands as root because of the insecure sudoers permissions |
| CVE-2021-38556 | RA Raspap Raspap | 8.8 | Aug 24 | includes/configure_client.php in RaspAP 2.6.6 allows attackers to execute commands via command injection |
| CVE-2021-33358 | RA Raspap Raspap | 8.8 | Jun 9 | Multiple vulnerabilities exist in RaspAP 2.3 to 2.6.5 in the "interface", "ssid" and "wpa_passphrase" POST parameters in /hostapd, when the parameter values contain special… |
| CVE-2021-33357 | RA Raspap Raspap | 9.8 | Jun 9 | A vulnerability exists in RaspAP 2.6 to 2.6.5 in the "iface" GET parameter in /ajax/networking/get_netcfg.php, when the "iface" parameter value contains special characters such as… |
| CVE-2021-33356 | RA Raspap Raspap | 8.8 | Jun 9 | Multiple privilege escalation vulnerabilities in RaspAP 1.5 to 2.6.5 could allow an authenticated remote attacker to inject arbitrary commands to /installers/common.sh component… |
| CVE-2020-24572 | RA Raspap Raspap | 8.8 | Aug 24 | An issue was discovered in includes/webconsole.php in RaspAP 2.5 |