CVE-2026-24788
1 advisory.
Packagist/billz/raspap-webgui CVE-2026-24788: high 8.8, EPSS 1.37%
RaspAP raspap-webgui contains an OS Command Injection vulnerability
Action: Upgrade billz/raspap-webgui to 3.3.6 or later.
composer require billz/raspap-webgui:3.3.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.3.6 | - |
Fixed versions
| 3.3.6 |
Sources
- osv: GHSA-4wwf-f7w3-94f5
- https://nvd.nist.gov/vuln/detail/CVE-2026-24788
- https://github.com/RaspAP/raspap-webgui/commit/f514f5a12ef0c34853b5370ef55d630b499f977d
- https://github.com/RaspAP/raspap-webgui
- https://github.com/RaspAP/raspap-webgui/releases/tag/3.3.6
- https://jvn.jp/en/jp/JVN27202136
CVE-2026-24788 · published · modified · JSON