What’s Vulnerable › Products

aaPanel vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your aaPanel version is affected

Latest aaPanel vulnerabilities

• CVE-2026-113507 — aaPanel common.py GetClientIp access control (CVSS 5.3)
• CVE-2026-113506 — aaPanel File Manager common.py ExecShell os command injection (CVSS 9.9)
• CVE-2026-113505 — aaPanel Download Endpoint v2.py send_file path traversal (CVSS 4.3)