All 7 CVE vulnerabilities found in Baota, with AI-generated Chinese analysis, references, and POCs.
Vendor: n/a
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-101011 | aaPanel BaoTa Domain domainMod.py get_domain_status sql injection CWE-89 | 4.7 | Medium | 2026-09-28 |
| CVE-2026-101010 | aaPanel BaoTa data.py getData sql injection CWE-89 | 4.7 | Medium | 2026-09-28 |
| CVE-2026-101009 | aaPanel BaoTa Unzip panelTask.py panelTask.bt_task._unzip os command injection CWE-78 | 8.4 | High | 2026-09-28 |
| CVE-2026-101008 | aaPanel BaoTa File Merge files.py merge_split_file command injection CWE-77 | 9.1 | Critical | 2026-09-28 |
| CVE-2026-101007 | aaPanel BaoTa Database Backup database.py InputSql os command injection CWE-78 | 8.4 | High | 2026-09-28 |
| CVE-2025-12914 | aaPanel BaoTa Backend database sql injection CWE-89 | 4.7 | Medium | 2025-11-08 |
| CVE-2022-4336 | BAOTA 跨站脚本漏洞 CWE-79 | 5.4 | - | 2022-12-09 |
All 7 known CVE vulnerabilities affecting Baota with full Chinese analysis, references, and POCs where available.