{"api_version":"v1","generated_at":"2026-10-09T14:40:00+00:00","product":{"cve_count":5,"evidence_gap_note":"This identity is present in BlackTree CVE records, but no product-specific publisher support or retirement history is currently registered in Lifecycle.","id":"security:cve-raspap-raspap-webgui-f40165a20257","lifecycle_state":"evidence_gap","linked_lifecycle_url":null,"name":"raspap-webgui","next_cursor":null,"observations":[{"affected":"raspap-webgui: 3.5.0, 3.5.1, 3.5.2, 3.5.3, 3.5.4, 3.5.5","affected_versions_present":true,"cve_id":"CVE-2026-101860","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-101860","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-09-29T10:44:14.248Z","patch_url":"","primary_source":"","published":"2026-09-29T01:45:15.092Z"},{"affected":"raspap-webgui: 3.5.0, 3.5.1, 3.5.2, 3.5.3, 3.5.4, 3.5.5","affected_versions_present":true,"cve_id":"CVE-2026-101859","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-101859","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-10-01T15:29:27.201Z","patch_url":"","primary_source":"","published":"2026-09-29T01:30:35.464Z"},{"affected":"raspap-webgui: 3.5.0, 3.5.1, 3.5.2, 3.5.3, 3.5.4, 3.5.5","affected_versions_present":true,"cve_id":"CVE-2026-101858","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-101858","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-09-29T17:27:09.184Z","patch_url":"","primary_source":"","published":"2026-09-29T01:15:15.238Z"},{"affected":"versions prior to 3.3.6","affected_versions_present":true,"cve_id":"CVE-2026-24788","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-24788","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-02-02T16:28:56.718Z","patch_url":"","primary_source":"","published":"2026-02-02T04:37:03.392Z"},{"affected":"3.0.9","affected_versions_present":true,"cve_id":"CVE-2024-2497","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-2497","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-08-08T20:47:11.997Z","patch_url":"https://toradah.notion.site/Code-Injection-Leading-to-Remote-Code-Execution-RCE-in-RaspAP-Web-GUI-d321e1a416694520bec7099253c65060?pvs=4","primary_source":"","published":"2024-03-15T17:00:07.963Z"}],"source_generated_at":"2026-10-09T06:17:25.511Z","vendor":"RaspAP"}}