Skip to content
Threat Feed
Subscribe

Product

AaPanel (<= 8.25.0)

1 brief RSS
critical advisory

aaPanel: Remote OS Command Injection via File Manager (CVE-2026-113506)

An OS command injection vulnerability exists in aaPanel versions 8.25.0 and earlier, allowing authenticated remote attackers to execute arbitrary system commands through the File Manager component.

aaPanel cve-2026-113506 remote-code-execution web-application
1t 1c