← Database

CVE-2026-24788

HIGH CVSS: 8.8 Published: 2026-02-02 Modified: 2026-06-17

Description

RaspAP raspap-webgui versions prior to 3.3.6 contain an OS command injection vulnerability. If exploited, an arbitrary OS command may be executed by a user who can log in to the product.

Affected Platforms

Unknown

Weakness Type

CWE-78

References