UpHeron
All vulnerabilities

Servers and applications

CVE-2026-113506

aaPanel File Manager common.py ExecShell os command injection

Severity
Critical 9.4
Published
20 Oct 2026
Last changed
20 Oct 2026
Added to UpHeron
3 Nov 2026
Sources
CVE Program

Affected software

SoftwareAffected versions
aaPanelServers and applications · cpe:a:aapanel:aapanel
  • Version 8.25.0
  • Version 8.24
  • Version 8.23
  • Version 8.22
All 26 release lines
  • Version 8.0
  • Version 8.1
  • Version 8.2
  • Version 8.3
  • Version 8.4
  • Version 8.5
  • Version 8.6
  • Version 8.7
  • Version 8.8
  • Version 8.9
  • Version 8.10
  • Version 8.11
  • Version 8.12
  • Version 8.13
  • Version 8.14
  • Version 8.15
  • Version 8.16
  • Version 8.17
  • Version 8.18
  • Version 8.19
  • Version 8.20
  • Version 8.21
  • Version 8.22
  • Version 8.23
  • Version 8.24
  • Version 8.25.0

References

  • CVE.org https://www.cve.org/CVERecord?id=CVE-2026-113506