Ajenti

13 CVEs across 3 Ajenti products. Browse Ajenti vulnerabilities, severities, and proof-of-concept exploits.

Ajenti products with known CVEs

ProductCVEs
Ajenti12
Ajenti Plugin Core2
Ajenticp1
Ajenti CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-40178Medium5.92026-04-10ajenti.plugin.core defines all necessary core elements to allow Ajenti to run properly. Prior to 0.112, if the 2FA was activated, it was possible during a shor…
CVE-2026-40177High7.52026-04-10ajenti.plugin.core defines all necessary core elements to allow Ajenti to run properly. Prior to 0.112, if the 2FA was activated, it was possible to bypass the…
CVE-2026-35175Medium6.52026-04-06Ajenti is a Linux and BSD modular server admin panel. Prior to 2.2.15, an authenticated user (using the auth_users plugin authentication method) could install…
CVE-2026-27975Critical9.82026-02-26Ajenti is a Linux and BSD modular server admin panel. Prior to version 2.2.13, an unauthenticated user could gain access to a server to execute arbitrary code…
CVE-2019-25066Medium6.32022-06-09A vulnerability has been found in ajenti 2.1.31 and classified as critical. This vulnerability affects unknown code of the component API. The manipulation lead…
CVE-2018-18548Medium6.12018-10-24ajenticp (aka Ajenti Docker control panel) for Ajenti through v1.2.23.13 has XSS via a filename that is mishandled in File Manager.
CVE-2018-1000126High7.52018-03-13Ajenti version 2 contains an Information Disclosure vulnerability in Line 176 of the code source that can result in user and system enumeration as well as data…
CVE-2018-1000083Medium5.32018-03-13Ajenti version version 2 contains a Improper Error Handling vulnerability in Login JSON request that can result in The requisition leaks a path of the server…
CVE-2018-1000082High8.82018-03-13Ajenti version version 2 contains a Cross ite Request Forgery (CSRF) vulnerability in the command execution panel of the tool used to manage the server. that c…
CVE-2018-1000081High7.52018-03-13Ajenti version version 2 contains a Input Validation vulnerability in ID string on Get-values POST request that can result in Server Crashing. This attack appe…
CVE-2018-1000080Medium6.52018-03-13Ajenti version version 2 contains a Insecure Permissions vulnerability in Plugins download that can result in The download of any plugins as being a normal use…
CVE-2014-43012014-06-18Multiple cross-site scripting (XSS) vulnerabilities in the respond_error function in routing.py in Eugene Pankov Ajenti before 1.2.21.7 allow remote attackers…
CVE-2014-22602014-04-30Cross-site scripting (XSS) vulnerability in plugins/main/content/js/ajenti.coffee in Eugene Pankov Ajenti 1.2.13 allows remote authenticated users to inject ar…