CVE-2023-30260: Raspap

High severity, CVSS 8.8. EPSS: 2.5% chance of exploitation in the next 30 days.

Command injection vulnerability in RaspAP raspap-webgui 2.8.8 and earlier allows remote attackers to run arbitrary commands via crafted POST request to hostapd settings form.

Affected products

• Raspap Raspap: up to and including 2.8.8

Published 2023-06-23. Last modified 2026-06-17.