aapanel

aapanel aapanel 6.6.6 - CVE-2020-14950 Descripción : permite a usuarios autenticados remotos ejecutar comandos arbitrarios a través del menú de configuración de Software Store. Versión afectada : Todas = 6.6.6 Información Para hacer este PoC, simplemente instalé el software usando docker-compose...

aapanel-ws-bypass

aaPanel：供应商并不总是能正确修复问题 针对 CVE-2021-37840 的不完整修复在 5 年后仍使 360 万台服务器面临 root RCE 风险 发现者： EON Security CVE： 待分配 CVSS： 8.8（高危）— AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 受影响版本： aaPanel 6.8.12 至 7.65.0（自 2021 年修复以来的所有版本） 安装基数： 超过 360 万台服务器 简介 2021 年，aaPanel（一款运行在超过 360 万台服务器上的免费托管控制面板）披露了一个跨站 WebSocket...

CVE-2026-29859

An arbitrary file upload vulnerability in aaPanel v7.57.0 allows attackers to execute arbitrary code via uploading a crafted file...

CVE-2026-29856

An issue in the VirtualHost configuration handling/parser component of aaPanel v7.57.0 allows attackers to cause a Regular Expression Denial of Service ReDoS via a crafted input...

CVE-2026-29858

A lack of path validation in aaPanel v7.57.0 allows attackers to execute a local file inclusion LFI, leadingot sensitive information exposure...

EUVD-2026-12921

An arbitrary file upload vulnerability in aaPanel v7.57.0 allows attackers to execute arbitrary code via uploading a crafted file...

EUVD-2026-12864

A lack of path validation in aaPanel v7.57.0 allows attackers to execute a local file inclusion LFI, leadingot sensitive information exposure...

CVE-2026-29856

An issue in the VirtualHost configuration handling/parser component of aaPanel v7.57.0 allows attackers to cause a Regular Expression Denial of Service ReDoS via a crafted input...

CVE-2026-29858

A lack of path validation in aaPanel v7.57.0 allows attackers to execute a local file inclusion LFI, leadingot sensitive information exposure...

CVE-2026-29859

An arbitrary file upload vulnerability in aaPanel v7.57.0 allows attackers to execute arbitrary code via uploading a crafted file...

CVE-2026-29856

An issue in the VirtualHost configuration handling/parser component of aaPanel v7.57.0 allows attackers to cause a Regular Expression Denial of Service ReDoS via a crafted input...

CVE-2026-29858

A lack of path validation in aaPanel v7.57.0 allows attackers to execute a local file inclusion LFI, leadingot sensitive information exposure...

PT-2026-26105

CVE-2026-29858 A lack of path validation in aaPanel v7.57.0 allows attackers to execute a local file inclusion LFI, leadingot sensitive information exposure. https://t.co/WowAOqIOTR...

CVE-2026-29859

An arbitrary file upload vulnerability in aaPanel v7.57.0 allows attackers to execute arbitrary code via uploading a crafted file...

CVE-2026-29858

CVE-2026-29858 affects aaPanel v7.57.0, where a lack of path validation enables local file inclusion (LFI) leading to exposure of sensitive information. The linked Red Hat, ENISA, NVD, and other feeds confirm the vulnerability statement, with the underlying cause described as insufficient path va...

CVE-2026-29856

An issue in the VirtualHost configuration handling/parser component of aaPanel v7.57.0 allows attackers to cause a Regular Expression Denial of Service ReDoS via a crafted input...

CVE-2026-29858

A lack of path validation in aaPanel v7.57.0 allows attackers to execute a local file inclusion LFI, leadingot sensitive information exposure...

aaPanel 安全漏洞

aaPanel is a simple yet powerful web-based control panel developed under the open-source license. Version 7.57.0 of aaPanel contains a security vulnerability caused by insufficient path validation, which may lead to local file inclusion attacks and result in the exposure of sensitive information...

PT-2026-26104

CVE-2026-29856 An issue in the VirtualHost configuration handling/parser component of aaPanel v7.57.0 allows attackers to cause a Regular Expression Denial of Service ReDoS via a … https://t.co/cUJ0hUck1A...

CVE-2026-29859

An arbitrary file upload vulnerability in aaPanel v7.57.0 allows attackers to execute arbitrary code via uploading a crafted file...