Login Request a demo
AJ
Product
ajenti
by ajenti · last CVE Sep 21, 2026
13
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Vulnerabilities13In the news0Timeline
Severity mix
Critical 2High 5Medium 4Low 0
Severity
All severities13Critical2High5Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add ajenti to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-79920
9.9
1%
Sep 21
Ajenti: Privilege escalation to root via unauthenticated/unauthorized plugin install task
Affected: < 2.2.16
CVE-2026-27975
9.8
1%
Feb 26
Ajenti has a potential Remote Code Execution
Affected: < 2.2.13
CVE-2019-25066
8.8
5%
Jun 9
ajenti API privileges management
Affected: 2.1.31
CVE-2018-1000082
8.8
1%
Mar 13
Ajenti version version 2 contains a Cross ite Request Forgery (CSRF) vulnerability in the command execution panel of the tool used to manage the server
Affected: 2
CVE-2026-40177
7.5
0%
Apr 10
Password bypass when 2FA is activated
Affected: < 0.112
CVE-2018-1000126
7.5
2%
Mar 13
Ajenti version 2 contains an Information Disclosure vulnerability in Line 176 of the code source that can result in user and system enumeration as well as data from the…
Affected: 2
CVE-2018-1000081
7.5
1%
Mar 13
Ajenti version version 2 contains a Input Validation vulnerability in ID string on Get-values POST request that can result in Server Crashing
Affected: 2
CVE-2026-35175
6.5
0%
Apr 6
Ajenti has an authorization bypass during custom package installation
Affected: < 2.2.15
CVE-2018-1000080
6.5
1%
Mar 13
Ajenti version version 2 contains a Insecure Permissions vulnerability in Plugins download that can result in The download of any plugins as being a normal user
Affected: 2
CVE-2026-40178
5.9
0%
Apr 10
ajenti.plugin.core has a race conditions in 2FA
Affected: < 0.112
CVE-2018-1000083
5.3
2%
Mar 13
Ajenti version version 2 contains a Improper Error Handling vulnerability in Login JSON request that can result in The requisition leaks a path of the server
Affected: 2
CVE-2014-4301
–
2%
Jun 18
Multiple cross-site scripting (XSS) vulnerabilities in the respond_error function in routing.py in Eugene Pankov Ajenti before 1.2.21.7 allow remote attackers to inject arbitrary…
Affected: through 1.2.21; 1.2.0; 1.2.1; 1.2.2; 1.2.3; 1.2.4; +16 more
CVE-2014-2260
–
1%
Apr 30
Cross-site scripting (XSS) vulnerability in plugins/main/content/js/ajenti.coffee in Eugene Pankov Ajenti 1.2.13 allows remote authenticated users to inject arbitrary web script…
Affected: 1.2.13
Showing 13