r
raspap
Security Risk Profile
51
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 18 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from August 24, 2020 to present
18
Total CVEs
14
Critical+High
0
Exploited
7
Unpatched
Threat Assessment
Avg CVSS
7.8
Base severity
Avg EPSS
1%
Exploit probability
Unpatched
7
Critical/High
Risk Level
51/100
medium
🆕 3Fresh (<7d)📈 3 in Last 30 Days
Severity Distribution
Critical
7High
7Medium
2Low
2Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
3Age Distribution
Common Weaknesses (CWE)
1
Command Injection
8
2
OS Command Injection
5
3
Code Injection
2
4
Path Traversal
1
Most Affected Products
1. RaspAP RaspAP12
2. RaspAP raspap-webgui11
3. composer/billz/raspap-webgui5
Recent Vulnerabilities
See more →CVE-2026-101860
CVSS 7.4high
RaspAP raspap-webgui sudo Configuration PluginInstaller.php addSudoers privileges management
Sep 29, 2026🔧 No Patch
CVE-2026-101859
CVSS 2.1low
RaspAP raspap-webgui OpenVPN Configuration del_ovpncfg.php escapeshellcmd os command injection
Sep 29, 2026🔧 No Patch
CVE-2026-101858
CVSS 2.0low
RaspAP raspap-webgui SSID Processing WiFiManager.php writeWpaSupplicant os command injection
Sep 29, 2026🔧 No Patch
CVE-2025-50428
CVSS 9.8critical
Aug 27, 2025
CVE-2025-44163
CVSS 6.3medium
Jun 27, 2025
CVE-2024-36622
CVSS 9.8critical
Nov 29, 2024
CVE-2024-2497
CVSS 7.2EPSS 0%high
RaspAP raspap-webgui HTTP POST Request provider.php code injection
Mar 15, 2024🔧 No Patch
CVE-2024-28753
CVSS 6.5EPSS 1%medium
Mar 8, 2024🔧 No Patch
CVE-2024-28754
CVSS 7.5EPSS 1%high
Mar 8, 2024
CVE-2022-39987
CVSS 8.8high
Aug 1, 2023
Monitor raspap in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.