CVE-2022-26252

PoC —

CVSS 3.1

6.5 medium

EPSS

2%p77

Published

Mar 27, 2022 (Mar 27, 2022)

Modified

Jun 17, 2026

Description

aaPanel v6.8.21 was discovered to be vulnerable to directory traversal. This vulnerability allows attackers to obtain the root user private SSH key(id_rsa).

Vendors: aapanel
Products: aapanel
Weakness: CWE-22
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (1.8%)

In the news0 stories

No ingested article mentions this CVE yet.