Skip to content
OpenAdvisories

Vendor

aaPanel

9 known vulnerabilities.

Products

BaoTa 6 BillionMail 2 aapanel WP Toolkit 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2026-101008

    aaPanel BaoTa File Merge files.py merge_split_file command injection

    A vulnerability was found in aaPanel BaoTa up to 11.8.0. Impacted is the function merge_split_file of the file /www/server/panel/class/files.py of the component File Merge Handler. Performing a manipulation of the argument split_file_path results in command i…

    aaPanel BaoTa