Vulnerabilities in aaPanel
8 resultsCVE-2026-101008CRITICALaaPanel BaoTa File Merge files.py merge_split_file command injectionEPSS 2.3%CVE-2026-101007CRITICALaaPanel BaoTa Database Backup database.py InputSql os command injectionEPSS 2.1%CVE-2026-101009CRITICALaaPanel BaoTa Unzip panelTask.py panelTask.bt_task._unzip os command injectionEPSS 1.8%CVE-2025-6813HIGHaapanel WP Toolkit 1.0 - 1.1 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation via auto_login() FunctionEPSS 0.4%CVE-2026-111367MEDIUMBillionMail through 4.9 Forgeable JWTs via Default Signing KeyEPSS 0.3%CVE-2025-12914MEDIUMaaPanel BaoTa Backend database sql injectionEPSS 0.3%CVE-2026-101010MEDIUMaaPanel BaoTa data.py getData sql injectionEPSS 0.2%CVE-2026-101011MEDIUMaaPanel BaoTa Domain domainMod.py get_domain_status sql injectionEPSS 0.2%