Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

RaspAP vulnerabilities

5 published CVEs name RaspAP among the affected products.

Published CVEs
5
Last 12 months
4
Critical
0
Known exploited
0

Critical 0High 2Medium 3Low 0Not scored 0

CVEs per yearBy the year they were published

  1. 20241
  2. 20264

Newest CVEs

  • CVE-2026-101860

    RaspAP raspap-webgui sudo Configuration PluginInstaller.php addSudoers privileges management

    RaspAP · raspap-webgui

    High8.7
  • CVE-2026-101859

    RaspAP raspap-webgui OpenVPN Configuration del_ovpncfg.php escapeshellcmd os command injection

    RaspAP · raspap-webgui

    Medium5.3
  • CVE-2026-101858

    RaspAP raspap-webgui SSID Processing WiFiManager.php writeWpaSupplicant os command injection

    RaspAP · raspap-webgui

    Medium5.1
  • CVE-2026-24788

    RaspAP raspap-webgui versions prior to 3.3.6 contain an OS command injection vulnerability. If exploited, an arbitrary OS command may be executed by a user who…

    RaspAP · raspap-webgui

    High8.7
  • CVE-2024-2497

    RaspAP raspap-webgui HTTP POST Request provider.php code injection

    RaspAP · raspap-webgui

    Medium4.7