CVE-2026-29858

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

September 23, 2026

Last Seen

September 23, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical Vulnerability Disclosed in aaPanel Allowing Remote Command Injection64.5

A high-risk vulnerability, CVE-2026-101009, was identified in aaPanel up to version 11.8.0, affecting the unzip functionality that could lead to OS command injection. The flaw allows remote attackers to manipulate the password argument, potentially compromising the host system and disrupting service...