aapanel vulnerabilities
9 published CVEs name aapanel among the affected products.
- 9Published CVEs9 of them scored
- 7Last 12 monthspublished in the last year
- 3Critical1 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-124579
aaPanel BillionMail Relay Configuration API relay.go injection
aaPanel · BillionMail
Medium5.3 - CVE-2026-111367
BillionMail through 4.9 Forgeable JWTs via Default Signing Key
aaPanel · BillionMail
Medium6.9 - CVE-2026-101011
aaPanel BaoTa Domain domainMod.py get_domain_status sql injection
aaPanel · BaoTa
Medium5.1 - CVE-2026-101010
aaPanel BaoTa data.py getData sql injection
aaPanel · BaoTa
Medium5.1 - CVE-2026-101009
aaPanel BaoTa Unzip panelTask.py panelTask.bt_task._unzip os command injection
aaPanel · BaoTa
Critical9.3 - CVE-2026-101008
aaPanel BaoTa File Merge files.py merge_split_file command injection
aaPanel · BaoTa
Critical9.4 - CVE-2026-101007
aaPanel BaoTa Database Backup database.py InputSql os command injection
aaPanel · BaoTa
Critical9.3 - CVE-2025-12914
aaPanel BaoTa Backend database sql injection
aaPanel · BaoTa
Medium5.1 - CVE-2025-6813
aapanel WP Toolkit 1.0 - 1.1 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation via auto_login() Function
aapanel · aapanel WP Toolkit
High8.8