Security Advisory

CVE-2026-24788

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2026-02-02 04:37:03
Last updated 2026-02-02 16:28:56
Assigner jpcert
State PUBLISHED

Description

RaspAP raspap-webgui versions prior to 3.3.6 contain an OS command injection vulnerability. If exploited, an arbitrary OS command may be executed by a user who can log in to the product.