Advisories · Technology

aaPanel.

Every CVE that names aaPanel among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-113507 CVE record

CVSS 6.9 Medium

aaPanel common.py GetClientIp access control
- aaPanel
- Privilege escalation
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-113506 CVE record

CVSS 9.4 CriticalCritical · CVSS 9+

aaPanel File Manager common.py ExecShell os command injection
- aaPanel
- Command injection
Not analysed yet 20 Oct 2026
CVE-2026-113505 CVE record

CVSS 5.3 Medium

aaPanel Download Endpoint v2.py send_file path traversal
- aaPanel
- Path traversal
Not analysed yet 20 Oct 2026