CVE-2026-29856

Published: Mar 18, 2026 Last Modified: Mar 18, 2026
ExploitDB:
Other exploit source:
Google Dorks:

Description

AI Translation Available

An issue in the VirtualHost configuration handling/parser component of aaPanel v7.57.0 allows attackers to cause a Regular Expression Denial of Service (ReDoS) via a crafted input.

https://github.com/aapanel/aapanel
https://github.com/mbiesiad/vulnerability-research/tree/main/CVE-2026-29856