https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T14:15:07.008026+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-06846 bdu:2023-06846 2026-10-02T14:15:07.088082+00:00 bdu:2023-06846 https://cve.radiocsirt.org/vuln/euvd-2026-196547 EUVD-2026-196547 2026-10-02T14:15:07.088118+00:00 EUVD-2026-196547 https://cve.radiocsirt.org/vuln/fkie_cve-2022-39986 fkie_cve-2022-39986 2026-10-02T14:15:07.088133+00:00

A Command injection vulnerability in RaspAP 2.8.0 thru 2.8.7 allows unauthenticated attackers to execute arbitrary commands via the cfg_id parameter in /ajax/openvpn/activate_ovpncfg.php and /ajax/openvpn/del_ovpncfg.php.

 https://cve.radiocsirt.org/vuln/ghsa-7c28-wg7r-pg6f GHSA-7c28-wg7r-pg6f — RaspAP Command Injection vulnerability 2026-10-02T14:15:07.088164+00:00

Affected: Packagist: billz/raspap-webgui

A Command injection vulnerability in RaspAP 2.8.0 thru 2.8.7 allows unauthenticated attackers to execute arbitrary commands via the `cfg_id` parameter in `/ajax/openvpn/activate_ovpncfg.php` and `/ajax/openvpn/del_ovpncfg.php`.

 https://cve.radiocsirt.org/vuln/gsd-2022-39986 gsd-2022-39986 2026-10-02T14:15:07.088193+00:00 gsd-2022-39986