Aapanel Aapanel vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Aapanel Aapanel: 3 record(s), with affected versions and fixes.
cpe:2.3:a:aapanel:aapanel

CVE-2026-29859 Critical · 9.8 CWE-79 Mar 18, 2026

Cross-site Scripting (XSS) in Aapanel

An arbitrary file upload vulnerability in aaPanel v7.57.0 allows attackers to execute arbitrary code via uploading a crafted file.

CVE-2026-29858 High · 7.5 CWE-98 Mar 18, 2026

PHP Remote File Inclusion in Aapanel

A lack of path validation in aaPanel v7.57.0 allows attackers to execute a local file inclusion (LFI), leadingot sensitive information exposure.

CVE-2026-29856 High · 7.5 CWE-400 Mar 18, 2026

Uncontrolled Resource Consumption in Aapanel

An issue in the VirtualHost configuration handling/parser component of aaPanel v7.57.0 allows attackers to cause a Regular Expression Denial of Service (ReDoS) via a crafted input.