AJ
Vendor
ajenti
16
CVEs
0
On KEV
0
New 30D
Products
AJ9.9
ajenti
ajenti
13 CVEs0 on KEV0 new
AP7.5
Ajenti Plugin Core
Ajenti
2 CVEs0 on KEV0 new
AJ6.1
Ajenticp
Ajenti
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-79920 | AJ ajenti ajenti | 9.9 | Sep 21 | Ajenti: Privilege escalation to root via unauthenticated/unauthorized plugin install task |
| CVE-2026-40178 | AJ ajenti ajenti | 5.9 | Apr 10 | ajenti.plugin.core has a race conditions in 2FA |
| CVE-2026-40177 | AJ ajenti ajenti | 7.5 | Apr 10 | Password bypass when 2FA is activated |
| CVE-2026-35175 | AJ ajenti ajenti | 6.5 | Apr 6 | Ajenti has an authorization bypass during custom package installation |
| CVE-2026-27975 | AJ ajenti ajenti | 9.8 | Feb 26 | Ajenti has a potential Remote Code Execution |
| CVE-2019-25066 | AJ Ajenti Ajenti | 8.8 | Jun 9 | ajenti API privileges management |
| CVE-2018-18548 | AJ Ajenticp Ajenti | 6.1 | Oct 24 | ajenticp (aka Ajenti Docker control panel) for Ajenti through v1.2.23.13 has XSS via a filename that is mishandled in File Manager |
| CVE-2018-1000126 | AJ Ajenti Ajenti | 7.5 | Mar 13 | Ajenti version 2 contains an Information Disclosure vulnerability in Line 176 of the code source that can result in user and system enumeration as well as data from the… |
| CVE-2018-1000083 | AJ Ajenti Ajenti | 5.3 | Mar 13 | Ajenti version version 2 contains a Improper Error Handling vulnerability in Login JSON request that can result in The requisition leaks a path of the server |
| CVE-2018-1000082 | AJ Ajenti Ajenti | 8.8 | Mar 13 | Ajenti version version 2 contains a Cross ite Request Forgery (CSRF) vulnerability in the command execution panel of the tool used to manage the server |
| CVE-2018-1000081 | AJ Ajenti Ajenti | 7.5 | Mar 13 | Ajenti version version 2 contains a Input Validation vulnerability in ID string on Get-values POST request that can result in Server Crashing |
| CVE-2018-1000080 | AJ Ajenti Ajenti | 6.5 | Mar 13 | Ajenti version version 2 contains a Insecure Permissions vulnerability in Plugins download that can result in The download of any plugins as being a normal user |
| CVE-2014-4301 | AJ Ajenti Ajenti | – | Jun 18 | Multiple cross-site scripting (XSS) vulnerabilities in the respond_error function in routing.py in Eugene Pankov Ajenti before 1.2.21.7 allow remote attackers to inject arbitrary… |
| CVE-2014-2260 | AJ Ajenti Ajenti | – | Apr 30 | Cross-site scripting (XSS) vulnerability in plugins/main/content/js/ajenti.coffee in Eugene Pankov Ajenti 1.2.13 allows remote authenticated users to inject arbitrary web script… |