← All advisories

High severity8.8NVD Advisory· Published Aug 24, 2021· Updated Jun 17, 2026

CVE-2021-38556

CVE-2021-38556

Description

includes/configure_client.php in RaspAP 2.6.6 allows attackers to execute commands via command injection.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
billz/raspap-webguiPackagist	<= 2.6.6	—

Affected products

3

RaspAP/RaspAPdescription
ghsa-coords
pkg:composer/billz/raspap-webgui
Range: <= 2.6.6
RaspAP/RaspAP
cpe:2.3:a:raspap:raspap:2.6.6:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

4

zerosecuritypenetrationtesting.comnvdExploitThird Party AdvisoryVDB EntryURL RepurposedWEB
github.com/RaspAP/raspap-webgui/blob/0e1d652c5e55f812aaf2a5908884e9db179416ee/includes/configure_client.phpnvdThird Party AdvisoryWEB
github.com/advisories/GHSA-7vph-p634-vrqfghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2021-38556ghsaADVISORY

News mentions

0

No linked articles in our index yet.