TI-2019-15206 CVE-2019-25066 · GHSA-p28j-xhp9-88wp
ajenti API privileges management
Priority HIGH 71
A vulnerability has been found in ajenti 2.1.31 and classified as critical.
ajenti
Records14All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high6CVSS 7.0–8.9
Exploited now
ajenti records in CISA KEVNo ajenti vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
14 records
TI-2026-28991 CVE-2026-40177 · GHSA-3mcx-6wxm-qr8v
Password bypass when 2FA is activated
Priority MEDIUM 48
ajenti.plugin.core defines all necessary core elements to allow Ajenti to run properly.
TI-2026-55290 CVE-2026-79920
Ajenti: Privilege escalation to root via unauthenticated/unauthorized plugin install task
Priority MEDIUM 44
Ajenti is a Linux & BSD modular server admin panel.
TI-2026-22317 CVE-2026-27975 · GHSA-vcw3-r3fx-j444
Ajenti has a potential Remote Code Execution
Priority MEDIUM 44
Ajenti is a Linux and BSD modular server admin panel.
TI-2018-15737 CVE-2018-1000082 · GHSA-2w58-27j5-f99h
Ajenti version version 2 contains a Cross ite Request Forgery (CSRF) vulnerability in the…
Priority MEDIUM 41
Ajenti version version 2 contains a Cross ite Request Forgery (CSRF) vulnerability in the command execution panel of the tool used to manage the server.
TI-2018-15779 CVE-2018-1000126 · GHSA-8jpc-25w7-fj92
Ajenti version 2 contains an Information Disclosure vulnerability in Line 176 of the code…
Priority LOW 36
Ajenti version 2 contains an Information Disclosure vulnerability in Line 176 of the code source that can result in user and system enumeration as well as data from the /etc/ajenti/config.yml file.
TI-2018-15736 CVE-2018-1000081 · GHSA-mp27-2772-552q
Ajenti version version 2 contains a Input Validation vulnerability in ID string on…
Priority LOW 35
Ajenti version version 2 contains a Input Validation vulnerability in ID string on Get-values POST request that can result in Server Crashing.
TI-2018-13115 CVE-2018-18548 · GHSA-5pcv-m8w2-62m9
ajenticp (aka Ajenti Docker control panel) for Ajenti through v1.2.23.13 has XSS via a…
Priority LOW 33
ajenticp (aka Ajenti Docker control panel) for Ajenti through v1.2.23.13 has XSS via a filename that is mishandled in File Manager.
TI-2026-28992 CVE-2026-40178 · GHSA-8647-755q-fw9p
ajenti.plugin.core has a race conditions in 2FA
Priority LOW 32
ajenti.plugin.core defines all necessary core elements to allow Ajenti to run properly.
TI-2026-27329 CVE-2026-35175 · GHSA-73jv-44c3-j5p2
Ajenti has an authorization bypass during custom package installation
Priority LOW 31
Ajenti is a Linux and BSD modular server admin panel.
TI-2018-15735 CVE-2018-1000080 · GHSA-mc57-hw6g-6hw2
Ajenti version version 2 contains a Insecure Permissions vulnerability in Plugins…
Priority LOW 30
Ajenti version version 2 contains a Insecure Permissions vulnerability in Plugins download that can result in The download of any plugins as being a normal user.
TI-2018-15738 CVE-2018-1000083 · GHSA-f576-rxff-hpmj
Ajenti version version 2 contains a Improper Error Handling vulnerability in Login JSON…
Priority LOW 27
Ajenti version version 2 contains a Improper Error Handling vulnerability in Login JSON request that can result in The requisition leaks a path of the server.
TI-2014-03523 CVE-2014-4301 · GHSA-2ch8-f849-pjg3
Multiple cross-site scripting (XSS) vulnerabilities in the respond_error function in…
Priority LOW 24
Multiple cross-site scripting (XSS) vulnerabilities in the respond_error function in routing.py in Eugene Pankov Ajenti before 1.2.21.7 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (…
TI-2014-01792 CVE-2014-2260 · GHSA-9crx-p357-5vw8
Cross-site scripting (XSS) vulnerability in plugins/main/content/js/ajenti.coffee in…
Priority LOW 20
Cross-site scripting (XSS) vulnerability in plugins/main/content/js/ajenti.coffee in Eugene Pankov Ajenti 1.2.13 allows remote authenticated users to inject arbitrary web script or HTML via the command field in the Cron…