Read the docs

ajenti

Records14All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high6CVSS 7.0–8.9

Exploited now

ajenti records in CISA KEV

No ajenti vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Ajenti 10 records HIGH Ajenti Plugin Core 2 records MEDIUM Ajenticp 1 record LOW

Records

2 records in Ajenti Plugin Core · all components

TI-2026-28991 CVE-2026-40177 · GHSA-3mcx-6wxm-qr8v

Password bypass when 2FA is activated

Priority MEDIUM 48

ajenti.plugin.core defines all necessary core elements to allow Ajenti to run properly.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00335 Published 2026-04-10 Fixed in 0.112 CWE-287
TI-2026-28992 CVE-2026-40178 · GHSA-8647-755q-fw9p

ajenti.plugin.core has a race conditions in 2FA

Priority LOW 32

ajenti.plugin.core defines all necessary core elements to allow Ajenti to run properly.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00237 Published 2026-04-10 Fixed in 0.112 CWE-287
Open these records in search →