Vulnerabilities

TI-2025-32128 CVE-2025-50428 · GHSA-mqhg-76g5-3rxv

In RaspAP raspap-webgui 3.3.2 and earlier, a command injection vulnerability exists in…

HIGH 82

In RaspAP raspap-webgui 3.3.2 and earlier, a command injection vulnerability exists in the includes/hostapd.php script.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01626 Published 2025-08-27 No fix listed CWE-77

TI-2025-28599 CVE-2025-44163 · GHSA-277f-37gw-9gmq

MEDIUM 61

RaspAP raspap-webgui 3.3.1 is vulnerable to Directory Traversal in ajax/networking/get_wgkey.php.

CVSS 3.1MEDIUM 6.3 Network No auth User interaction EPSS 0.00604 Published 2025-06-27 Fixed in 3.3.6 CWE-23

TI-2024-24354 CVE-2024-36622 · GHSA-2jfw-8cwj-3579

MEDIUM 54

In RaspAP raspap-webgui 3.0.9 and earlier, a command injection vulnerability exists in the clearlog.php script.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02838 Published 2024-11-29 No fix listed CWE-94