BaoTa
aaPanel · 6 CVEs
CVE-2026-101011
MEDIUM
aaPanel BaoTa Domain domainMod.py get_domain_status sql injection
Sep 28, 2026
CVE-2026-101010
MEDIUM
aaPanel BaoTa data.py getData sql injection
Sep 28, 2026
CVE-2026-101009
CRITICAL
aaPanel BaoTa Unzip panelTask.py panelTask.bt_task._unzip os command injection
Sep 28, 2026
CVE-2026-101008
CRITICAL
aaPanel BaoTa File Merge files.py merge_split_file command injection
Sep 28, 2026
CVE-2026-101007
CRITICAL
aaPanel BaoTa Database Backup database.py InputSql os command injection
Sep 28, 2026
CVE-2025-12914
MEDIUM
aaPanel BaoTa Backend database sql injection
Nov 8, 2025
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2026-101011 | aaPanel BaoTa Domain domainMod.py get_domain_status sql injection | MEDIUM | 0.20% | Sep 28, 2026 |
| CVE-2026-101010 | aaPanel BaoTa data.py getData sql injection | MEDIUM | 0.25% | Sep 28, 2026 |
| CVE-2026-101009 | aaPanel BaoTa Unzip panelTask.py panelTask.bt_task._unzip os command injection | CRITICAL | 1.76% | Sep 28, 2026 |
| CVE-2026-101008 | aaPanel BaoTa File Merge files.py merge_split_file command injection | CRITICAL | 2.34% | Sep 28, 2026 |
| CVE-2026-101007 | aaPanel BaoTa Database Backup database.py InputSql os command injection | CRITICAL | 1.76% | Sep 28, 2026 |
| CVE-2025-12914 | aaPanel BaoTa Backend database sql injection | MEDIUM | 0.25% | Nov 8, 2025 |
Showing 1 to 6 of 6 CVEs