RaspAP vulnerabilities
Published CVEs affecting RaspAP products: 1 record(s), with severity, exploitation and fixes.
CVE-2026-24788
High · 8.8
CWE-78 Feb 2, 2026
OS Command Injection in RaspAP Raspap-webgui
RaspAP raspap-webgui versions prior to 3.3.6 contain an OS command injection vulnerability. If exploited, an arbitrary OS command may be executed by a user who can log in to the product.