https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T15:34:58.744224+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2021-94941 cnvd-2021-94941 2026-10-03T15:34:58.748634+00:00 cnvd-2021-94941 https://cve.radiocsirt.org/vuln/euvd-2026-30327 EUVD-2026-30327 2026-10-03T15:34:58.748668+00:00 EUVD-2026-30327 https://cve.radiocsirt.org/vuln/fkie_cve-2021-38557 fkie_cve-2021-38557 2026-10-03T15:34:58.748683+00:00

raspap-webgui in RaspAP 2.6.6 allows attackers to execute commands as root because of the insecure sudoers permissions. The www-data account can execute /etc/raspap/hostapd/enablelog.sh as root with no password; however, the www-data account can also overwrite /etc/raspap/hostapd/enablelog.sh with any executable content.

 https://cve.radiocsirt.org/vuln/ghsa-536p-4pcj-5mr9 GHSA-536p-4pcj-5mr9 — raspap-webgui in RaspAP 2.6.6 allows attackers to execute commands as root because of the insecure sudoers permissions. 2026-10-03T15:34:58.748712+00:00

Affected: Packagist: billz/raspap-webgui

raspap-webgui in RaspAP 2.6.6 allows attackers to execute commands as root because of the insecure sudoers permissions. The www-data account can execute /etc/raspap/hostapd/enablelog.sh as root with no password; however, the www-data account can also overwrite /etc/raspap/hostapd/enablelog.sh with any executable content.

 https://cve.radiocsirt.org/vuln/gsd-2021-38557 gsd-2021-38557 2026-10-03T15:34:58.748735+00:00 gsd-2021-38557