raspap Vulnerabilities and Affected Products
Vulnerabilities associated with raspap-webgui.
Products
Clear product- raspap5 vulnerabilities
- raspap-webgui2 vulnerabilities
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2026-24788HIGH | RaspAP raspap-webgui contains an OS Command Injection vulnerabilityRaspAP raspap-webgui versions prior to 3.3.6 contain an OS command injection vulnerability. If exploited, an arbitrary OS command may be executed by a user who can log in to the product. CWE-78Feb 2, 2026 | CVSS8.7v4.0 | EPSS1.33% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-2497MEDIUM | RaspAP raspap-webgui HTTP POST Request provider.php code injectionA vulnerability was found in RaspAP raspap-webgui 3.0.9 and classified as critical. This issue affects some unknown processing of the file includes/provider.php of the component HTTP POST Request Handler. The manipulation of the argument country leads to code injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-256919. NOTE: The vendor was contacted early about this disclosure but did… CWE-94Mar 15, 2024 | CVSS4.7v3.1 | EPSS0.907% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |