Records19All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high11CVSS 7.0–8.9
Exploited now
RaspAP records in CISA KEVNo RaspAP vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority HIGH 82
In RaspAP raspap-webgui 3.3.2 and earlier, a command injection vulnerability exists in the includes/hostapd.php script.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01626 · Published 2025-08-27 · No fix listed CWE-77
Priority MEDIUM 61
RaspAP raspap-webgui 3.3.1 is vulnerable to Directory Traversal in ajax/networking/get_wgkey.php.
CVSS 3.1MEDIUM 6.3· Network · No auth · User interaction · EPSS 0.00604 · Published 2025-06-27 · Fixed in 3.3.6 CWE-23
Priority MEDIUM 54
In RaspAP raspap-webgui 3.0.9 and earlier, a command injection vulnerability exists in the clearlog.php script.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02838 · Published 2024-11-29 · No fix listed CWE-94
