What’s Vulnerable › Products

aaPanel BaoTa vulnerabilities

6 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 6 published in the last 12 months.

Check whether your aaPanel BaoTa version is affected

Latest aaPanel BaoTa vulnerabilities

• CVE-2026-101011 — aaPanel BaoTa Domain domainMod.py get_domain_status sql injection (CVSS 4.7)
• CVE-2026-101010 — aaPanel BaoTa data.py getData sql injection (CVSS 4.7)
• CVE-2026-101009 — aaPanel BaoTa Unzip panelTask.py panelTask.bt_task._unzip os command injection (CVSS 8.4)
• CVE-2026-101008 — aaPanel BaoTa File Merge files.py merge_split_file command injection (CVSS 9.1)
• CVE-2026-101007 — aaPanel BaoTa Database Backup database.py InputSql os command injection (CVSS 8.4)
• CVE-2025-12914 — aaPanel BaoTa Backend database sql injection (CVSS 4.7)