RaspAP raspap-webgui

• CVE-2026-101860 High 8.8 RaspAP raspap-webgui sudo Configuration PluginInstaller.php addSudoers privileges management 0.5%
• CVE-2026-101859 Medium 5.4 RaspAP raspap-webgui OpenVPN Configuration del_ovpncfg.php escapeshellcmd os command injection 1.6%
• CVE-2026-101858 Medium 4.7 RaspAP raspap-webgui SSID Processing WiFiManager.php writeWpaSupplicant os command injection 2.5%
• CVE-2026-24788 High 8.8 RaspAP raspap-webgui versions prior to 3.3.6 contain an OS command injection vulnerability. If exploited, an arbitrary OS command may be executed by a user who can log in to the product. 1.4%
• CVE-2024-2497 Medium 4.7 RaspAP raspap-webgui HTTP POST Request provider.php code injection 0.9%