AaaPanel

Products

Exploited and recent CVEs

• CVE-2026-111367 Medium 6.5 BillionMail through 4.9 Forgeable JWTs via Default Signing Key 0.3%
• CVE-2026-101011 Medium 4.7 aaPanel BaoTa Domain domainMod.py get_domain_status sql injection 0.2%
• CVE-2026-101010 Medium 4.7 aaPanel BaoTa data.py getData sql injection 0.2%
• CVE-2026-101009 High 8.4 aaPanel BaoTa Unzip panelTask.py panelTask.bt_task._unzip os command injection 1.8%
• CVE-2026-101008 Critical 9.1 aaPanel BaoTa File Merge files.py merge_split_file command injection 2.3%
• CVE-2026-101007 High 8.4 aaPanel BaoTa Database Backup database.py InputSql os command injection 2.1%
• CVE-2025-12914 Medium 4.7 aaPanel BaoTa Backend database sql injection 0.3%
• CVE-2025-6813 High 8.8 aapanel WP Toolkit 1.0 - 1.1 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation via auto_login() Function 0.4%