BaoTa vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

BA

Product

BaoTa

by aaPanel · last CVE Sep 28, 2026

6

CVEs

0

On KEV

9.1

Max CVSS

0

New 30D

Vulnerabilities6 In the news0 Timeline

Severity mix

Critical 1High 2Medium 3Low 0

Severity

All severities6 Critical1 High2 Medium3 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add BaoTa to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-101008	9.1	2%	Sep 28	aaPanel BaoTa File Merge files.py merge_split_file command injection Affected: 11.0; 11.1; 11.2; 11.3; 11.4; 11.5; +3 more
CVE-2026-101009	8.4	2%	Sep 28	aaPanel BaoTa Unzip panelTask.py panelTask.bt_task._unzip os command injection Affected: 11.0; 11.1; 11.2; 11.3; 11.4; 11.5; +3 more
CVE-2026-101007	8.4	2%	Sep 28	aaPanel BaoTa Database Backup database.py InputSql os command injection Affected: 11.0; 11.1; 11.2; 11.3; 11.4; 11.5; +3 more
CVE-2026-101011	4.7	0%	Sep 28	aaPanel BaoTa Domain domainMod.py get_domain_status sql injection Affected: 11.0; 11.1; 11.2; 11.3; 11.4; 11.5; +3 more
CVE-2026-101010	4.7	0%	Sep 28	aaPanel BaoTa data.py getData sql injection Affected: 11.0; 11.1; 11.2; 11.3; 11.4; 11.5; +3 more
CVE-2025-12914	4.7	0%	Nov 8	aaPanel BaoTa Backend database sql injection Affected: 11.0; 11.1; 11.2