~ / search / GHSA-4wwf-f7w3-94f5

GHSA-4wwf-f7w3-94f5

RaspAP raspap-webgui contains an OS Command Injection vulnerability

Source: GitHub Advisory Database (reviewed) High CVE-2026-24788

Packages

EcosystemPackageAffectedFixed in
Packagist billz/raspap-webgui < 3.3.6 3.3.6

Details

As written in the advisory (Markdown source, shown as plain text).

RaspAP raspap-webgui versions prior to 3.3.6 contain an OS Command Injection vulnerability. If exploited, an arbitrary OS command may be executed by a user who can log in to the product.

References

External links from the advisory. They lead to third-party sites.