Vendor

AaPanel

3 briefs RSS

high advisory

aaPanel BillionMail: Injection vulnerability in Relay Configuration API (CVE-2026-124579)

1 CVE

An injection vulnerability exists in the Relay Configuration API of aaPanel BillionMail up to version 4.9.

BillionMail

1c 3d ago

critical advisory

aaPanel: Remote OS Command Injection via File Manager (CVE-2026-113506)

1 TTP 1 CVE

An OS command injection vulnerability exists in aaPanel versions 8.25.0 and earlier, allowing authenticated remote attackers to execute arbitrary system commands through the File Manager component.

aaPanel cve-2026-113506 remote-code-execution web-application

1t 1c 3w ago

critical threat

Command Injection in aaPanel BaoTa via File Merge Handler

1 rule 2 TTPs 1 CVE

An unauthenticated remote command injection vulnerability in the aaPanel BaoTa File Merge Handler allows attackers to execute arbitrary system commands via the split_file_path parameter.

exploited BaoTa web-application-vulnerability rce command-injection remote-code-execution vulnerability linux webserver aaPanel

1r 2t 1c Sep 28, 2026