Most recent entries from all

EUVD-2026-267034

fkie_cve-2026-24788

RaspAP raspap-webgui versions prior to 3.3.6 contain an OS command injection vulnerability. If exploited, an arbitrary OS command may be executed by a user who can log in to the product.

GHSA-4wwf-f7w3-94f5 — RaspAP raspap-webgui contains an OS Command Injection vulnerability

Affected: Packagist: billz/raspap-webgui

RaspAP raspap-webgui versions prior to 3.3.6 contain an OS Command Injection vulnerability. If exploited, an arbitrary OS command may be executed by a user who can log in to the product.

jvndb-2026-000014

RaspAP raspap-webgui contains the following vulnerability.<ul><li>OS command injection (CWE-78) - CVE-2026-24788</li></ul>Taihei Kusayanagi of NTT Security (Japan) KK reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.