[ Vendor · 6 CVEs ]
aaPanel
CVEs affecting aaPanel published in the last 30 days, plus any aaPanel CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-111367 | 15 Oct 2026 | CVSS 6.5 | aaPanel BillionMailBillionMail through 4.9 contains a hard-coded cryptographic key vulnerability that allows unauthenticated attackers to forge unsubscribe and… | |
| CVE-2026-101010 | 28 Sep 2026 | CVSS 4.7 | aaPanel BaoTaA vulnerability was identified in aaPanel BaoTa up to 11.8.0. The impacted element is the function getData of the file… | |
| CVE-2026-101011 | 28 Sep 2026 | CVSS 4.7 | aaPanel BaoTaA security flaw has been discovered in aaPanel BaoTa up to 11.8.0. This affects the function get_domain_status of the file… | |
| CVE-2026-101007 | 28 Sep 2026 | CVSS 8.4 | aaPanel BaoTaA vulnerability has been found in aaPanel BaoTa up to 11.8.0. This issue affects the function InputSql of the file class/database.py of the component… | |
| CVE-2026-101008 | 28 Sep 2026 | CVSS 9.1 | aaPanel BaoTaA vulnerability was found in aaPanel BaoTa up to 11.8.0. Impacted is the function merge_split_file of the file /www/server/panel/class/files.py of… | |
| CVE-2026-101009 | 28 Sep 2026 | CVSS 8.4 | aaPanel BaoTaA vulnerability was determined in aaPanel BaoTa up to 11.8.0. The affected element is the function panelTask.bt_task._unzip of the file… |