Signal is active with 4 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
RaspAP raspap-webgui versions prior to 3.3.6 contain an OS command injection vulnerability. If exploited, an arbitrary OS command may be executed by a user who can log in to the product.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
There is a new vulnerability with elevated criticality in RaspAP raspap-webgui (CVE-2026-24788) https://vuldb.com/?id.343681
Post summary
A new vulnerability (CVE-2026-24788) affecting RaspAP raspap-webgui has been disclosed with elevated criticality, but no details about exploitation, patches, or PoC are provided.
[CVE-2026-24788: HIGH] RaspAP raspap-webgui versions prior to 3.3.6 contain an OS command injection vulnerability. If exploited, an arbitrary OS command may be executed by a user who can log in to the product.#cve,CVE-2026-24788,#cybersecurity https://cvefind.com/CVE-2026-24788
Post summary
This post discloses a high‑severity OS command injection vulnerability in RaspAP raspap-webgui versions prior to 3.3.6 that allows authenticated users to execute arbitrary commands.
CVE-2026-24788 OS Command Injection Vulnerability in RaspAP WebGUI Prior to 3.3.6 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-24788
Post summary
The post announces CVE-2026-24788, an OS command injection flaw in RaspAP WebGUI before version 3.3.6, without providing PoC, exploit code, or mitigation details.
🟠 CVE-2026-24788 - High RaspAP raspap-webgui versions prior to 3.3.6 contain an OS command injection vulnerability. If exploited, an arbitrary OS command may be executed by a user who can log in to the product. https://www.thehackerwire.com/vulnerability/CVE-2026-24788/ https://t.co/i8XmkECGoU
Post summary
CVE-2026-24788 is an OS command injection vulnerability in RaspAP raspap-webgui versions prior to 3.3.6 that allows authenticated users to execute arbitrary OS commands.