Xiaopi vulnerabilities
We track 1 vulnerability in Xiaopi products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on February 8, 2026.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest Xiaopi vulnerabilities
- 9.8 Critical severity
Panel: Improper Neutralization of Special Elements used in an SQL Command
A security flaw has been discovered in Xiaopi Panel up to 20260126. This impacts an unknown function of the file /demo.php of the component WAF Firewall. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exp