Skip to content

CVE-2026-101009

CVE

Threat entity extracted from intelligence sources

Frequency
1
occurrences
First Seen
September 28, 2026
Last Seen
September 28, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical Vulnerability Disclosed in aaPanel Allowing Remote Command Injection64.5

A high-risk vulnerability, CVE-2026-101009, was identified in aaPanel up to version 11.8.0, affecting the unzip functionality that could lead to OS command injection. The flaw allows remote attackers to manipulate the password argument, potentially compromising the host system and disrupting service...

Public Exploits

Checking GitHub for proof-of-concept code…

CVE Details

Related Entities

Zero-day ExploitCWE-78 - OS Command InjectionT1059 - Command and Scripting Interpreter