https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-29859.htmlhttps://patchthecve.com/cve/CVE-2026-29859.htmlWed, 17 Jun 2026 10:29:55 +0000CRITICAL 9.8: An arbitrary file upload vulnerability in aaPanel v7.57.0 allows attackers to execute arbitrary code via uploading a crafted file.https://patchthecve.com/cve/CVE-2026-29858.htmlhttps://patchthecve.com/cve/CVE-2026-29858.htmlWed, 17 Jun 2026 10:29:54 +0000HIGH 7.5: A lack of path validation in aaPanel v7.57.0 allows attackers to execute a local file inclusion (LFI), leadingot sensitive information exposure.https://patchthecve.com/cve/CVE-2026-29856.htmlhttps://patchthecve.com/cve/CVE-2026-29856.htmlWed, 17 Jun 2026 10:29:54 +0000HIGH 7.5: An issue in the VirtualHost configuration handling/parser component of aaPanel v7.57.0 allows attackers to cause a Regular Expression Denial of Service (ReDoS) via a crafted input.https://patchthecve.com/cve/CVE-2024-42922.htmlhttps://patchthecve.com/cve/CVE-2024-42922.htmlWed, 17 Jun 2026 07:50:08 +0000MEDIUM 6.5: AAPanel v7.0.7 was discovered to contain an OS command injection vulnerability.