CVE-2026-111367 | aaPanel BillionMail up to 4.9 /api/unsubscribe hard-coded credentials

October 16, 2026 Yanac

A vulnerability classified as critical was found in aaPanel BillionMail up to 4.9. This affects an unknown part of the file /api/unsubscribe. Executing a manipulation can lead to hard-coded credentials.

The identification of this vulnerability is CVE-2026-111367. The attack may be launched remotely. There is no exploit available.VulDB Recent EntriesRead More