CVE-2026-29859

CRITICAL CVSS: 9.8 Published: 2026-03-18 Modified: 2026-06-17

Description

An arbitrary file upload vulnerability in aaPanel v7.57.0 allows attackers to execute arbitrary code via uploading a crafted file.

Affected Platforms

Aapanel Aapanel

Weakness Type

CWE-79, CWE-434

References