CVE-2022-48079

PoC —

CVSS 3.1

9.8 critical

EPSS

1%p71

Published

Feb 2, 2023 (Feb 2, 2023)

Modified

Jun 17, 2026

Description

Monnai aaPanel host system v1.5 contains an access control issue which allows attackers to escalate privileges and execute arbitrary code via uploading a crafted PHP file to the virtual host directory of the system.

Vendors: mengnai
Products: aapanel host system
Weakness: CWE-434
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.4%)

In the news0 stories

No ingested article mentions this CVE yet.