CVE-2026-113505Medium· 4.3▾ SunlitA flaw has been found in aaPanel up to 8.25.0. Impacted is the function send_file of the file BTPanel/routes/v2.py of the component Download Endpoint. Executing a manipulation of the argument filename can lead to path traversal. The atta…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 23.7 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
A flaw has been found in aaPanel up to 8.25.0. Impacted is the function send_file of the file BTPanel/routes/v2.py of the component Download Endpoint. Executing a manipulation of the argument filename can lead to path traversal. The attack can be executed remotely. The exploit has been published and may be used. The vendor confirms: "The reported RCE and LFI vulnerabilities require authentication."
aaPanel 8.0aaPanel 8.1aaPanel 8.2aaPanel 8.3aaPanel 8.4aaPanel 8.5aaPanel 8.6aaPanel 8.7aaPanel 8.8aaPanel 8.9aaPanel 8.10aaPanel 8.11aaPanel 8.12aaPanel 8.13aaPanel 8.14aaPanel 8.15aaPanel 8.16aaPanel 8.17aaPanel 8.18aaPanel 8.19aaPanel 8.20aaPanel 8.21aaPanel 8.22aaPanel 8.23aaPanel 8.24aaPanel 8.25.0Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-113506Critical· 9.9aaPanel File Manager common.py ExecShell os command injection
CVE-2026-113507Medium· 5.3aaPanel common.py GetClientIp access control
CVE-2022-37906Medium· 6.5An authenticated path traversal vulnerability exists in the ArubaOS command line interface
CVE-2024-13986High· 8.8Nagios XI < 2024R1.3.2 contains a remote code execution vulnerability by chaining two flaws: an arbitrary file upload and a path traversal in the Core Config Snapshots interface
CVE-2023-7260High· 7.5Path Traversal vulnerability discovered in OpenText™ CX-E Voice, affecting all version through 22.4
CVE-2023-7249Critical· 9.8Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in OpenText OpenText Directory Services allows Path Traversal.This issue affects OpenText Directory Services: from 16.4.2 before 24.1.