Ajenti vulnerabilities

Products

• Ajenti 14
• Plugin Core 2

Newest

• ajenti Ajenti: Privilege escalation to root via unauthenticated/unauthorized plugin install task CVE-2026-79920 9.9 CriticalSeptember 21, 2026
• ajenti, ajenti plugin core +1 more ajenti.plugin.core has a race conditions in 2FA CVE-2026-40178 Fix available 6.9 MediumApril 10, 2026
• ajenti, ajenti plugin core +1 more Password bypass when 2FA is activated CVE-2026-40177 Fix available 9.3 CriticalApril 10, 2026
• ajenti Ajenti has an authorization bypass during custom package installation CVE-2026-35175 Fix available 7.2 HighApril 3, 2026
• ajenti Ajenti has a potential Remote Code Execution CVE-2026-27975 Fix available 8.1 HighFebruary 26, 2026
• ajenti Ajenti 2.1.36 Authenticated Remote Code Execution CVE-2020-37002 8.7 HighJanuary 29, 2026
• ajenti ajenti API privileges management CVE-2019-25066 Public exploit 6.3 MediumJune 9, 2022
• ajenti ajenticp Ajenti Cross-site Scripting Via Filename CVE-2018-18548 Public exploit 6.1 MediumOctober 24, 2018
• ajenti Ajenti version 2 contains an Information Disclosure vulnerability in Line 176 of the code source... CVE-2018-1000126 7.5 HighMarch 13, 2018
• ajenti Ajenti version version 2 contains a Improper Error Handling vulnerability in Login JSON request... CVE-2018-1000083 5.3 MediumMarch 13, 2018
• ajenti Ajenti version version 2 contains a Cross ite Request Forgery (CSRF) vulnerability in the command... CVE-2018-1000082 8.8 HighMarch 13, 2018
• ajenti Ajenti version version 2 contains a Input Validation vulnerability in ID string on Get-values... CVE-2018-1000081 7.5 HighMarch 13, 2018
• ajenti Ajenti version version 2 contains a Insecure Permissions vulnerability in Plugins download that... CVE-2018-1000080 6.5 MediumMarch 13, 2018
• ajenti Eugene Pankov Ajenti Cross-site scripting Vulnerabilities CVE-2014-4301 Fix available 4.3 MediumJune 18, 2014
• ajenti Ajenti Cross-site scripting (XSS) vulnerability CVE-2014-2260 Fix available 3.5 LowApril 30, 2014