Threats tagged 'ghsa-675c-v9h6-j3g3'

A high-severity vulnerability (CVE-2026-101860) exists in RaspAP raspap-webgui up to version 3.5.5. It affects the PluginInstaller::addSudoers function responsible for sudo configuration, leading to improper privilege management. The vulnerability can be exploited remotely without user interaction. Public exploit code is available, but the vendor has not responded or issued a fix.