Vulnerabilidades do Aapanel Aapanel

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Aapanel Aapanel: 3 registro(s), com versões afetadas e correções.
cpe:2.3:a:aapanel:aapanel

CVE-2026-29859 Crítica · 9.8 CWE-79 18/03/2026

Cross-site Scripting (XSS) em Aapanel

An arbitrary file upload vulnerability in aaPanel v7.57.0 allows attackers to execute arbitrary code via uploading a crafted file.

CVE-2026-29858 Alta · 7.5 CWE-98 18/03/2026

PHP Remote File Inclusion em Aapanel

A lack of path validation in aaPanel v7.57.0 allows attackers to execute a local file inclusion (LFI), leadingot sensitive information exposure.

CVE-2026-29856 Alta · 7.5 CWE-400 18/03/2026

Uncontrolled Resource Consumption em Aapanel

An issue in the VirtualHost configuration handling/parser component of aaPanel v7.57.0 allows attackers to cause a Regular Expression Denial of Service (ReDoS) via a crafted input.