{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"2.6.6"}],"component":"billz/raspap-webgui","cve_ids":["CVE-2021-38556"],"ecosystem":"Packagist","epss":0.13039,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-7vph-p634-vrqf","id":"tcs_01M5KEYE4BQ1FM56WKZS4XFCYX","modified_at":"2026-09-10T03:49:08.754237762Z","published_at":"2021-09-02T17:11:00Z","references":["https://osv.dev/vulnerability/GHSA-7vph-p634-vrqf","https://nvd.nist.gov/vuln/detail/CVE-2021-38556","https://github.com/RaspAP/raspap-webgui","https://github.com/RaspAP/raspap-webgui/blob/0e1d652c5e55f812aaf2a5908884e9db179416ee/includes/configure_client.php","https://zerosecuritypenetrationtesting.com/?page_id=306"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-7vph-p634-vrqf","url":"https://osv.dev/vulnerability/GHSA-7vph-p634-vrqf"}],"summary":"Command Injection in RaspAP 2.6.6"}