CVE-2025-50428

A command injection vulnerability exists in RaspAP raspap-webgui version 3.3.2 and earlier within the includes/hostapd.php script. The flaw is caused by improper sanitization of user input provided via the interface parameter. An authenticated attacker with low privileges can inject and execute a...