Skip to content
OpenAdvisories

Vendor

Xiaopi

2 known vulnerabilities.

Products

Panel 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.3
    CVE-2026-2122

    Xiaopi Panel WAF Firewall demo.php sql injection

    A security flaw has been discovered in Xiaopi Panel up to 20260126. This impacts an unknown function of the file /demo.php of the component WAF Firewall. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The ex…

    Xiaopi Panel