aaPanel BaoTa

• CVE-2026-101011 Medium 4.7 aaPanel BaoTa Domain domainMod.py get_domain_status sql injection 0.2%
• CVE-2026-101010 Medium 4.7 aaPanel BaoTa data.py getData sql injection 0.2%
• CVE-2026-101009 High 8.4 aaPanel BaoTa Unzip panelTask.py panelTask.bt_task._unzip os command injection 1.8%
• CVE-2026-101008 Critical 9.1 aaPanel BaoTa File Merge files.py merge_split_file command injection 2.3%
• CVE-2026-101007 High 8.4 aaPanel BaoTa Database Backup database.py InputSql os command injection 2.1%
• CVE-2025-12914 Medium 4.7 aaPanel BaoTa Backend database sql injection 0.3%