EIP-2026-114675
PRE-CVEaaPanel 6.6.6 - Privilege Escalation & Remote Code Execution (Authenticated)
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-114675. PoCs published by Ünsal Furkan Harani.
AI-analyzed exploit summary This exploit leverages an authenticated privilege escalation vulnerability in aaPanel 6.6.6 by abusing the crontab feature, which runs with root privileges. An authenticated admin can execute arbitrary shell commands via a crafted script in the crontab interface, leading to root access.
Description
aaPanel 6.6.6 - Privilege Escalation & Remote Code Execution (Authenticated)
Exploits (1)
This exploit leverages an authenticated privilege escalation vulnerability in aaPanel 6.6.6 by abusing the crontab feature, which runs with root privileges. An authenticated admin can execute arbitrary shell commands via a crafted script in the crontab interface, leading to root access.