Vulnerabilities

TI-2026-27329 CVE-2026-35175 · GHSA-73jv-44c3-j5p2

Ajenti has an authorization bypass during custom package installation

LOW 31

Ajenti is a Linux and BSD modular server admin panel.

CVSS 4.0HIGH 7.2 Network Low privileges No interaction EPSS 0.00277 Published 2026-04-06 Fixed in 2.2.15 CWE-862

TI-2026-22317 CVE-2026-27975 · GHSA-vcw3-r3fx-j444

Ajenti has a potential Remote Code Execution

MEDIUM 44

Ajenti is a Linux and BSD modular server admin panel.

CVSS 4.0HIGH 8.1 Network No auth No interaction EPSS 0.00588 Published 2026-02-26 Fixed in 2.2.13 CWE-284

TI-2019-15206 CVE-2019-25066 · GHSA-p28j-xhp9-88wp

ajenti API privileges management

HIGH 71

A vulnerability has been found in ajenti 2.1.31 and classified as critical.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.05481 Published 2022-06-09 No fix listed CWE-269

TI-2018-15779 CVE-2018-1000126 · GHSA-8jpc-25w7-fj92

Ajenti version 2 contains an Information Disclosure vulnerability in Line 176 of the code…

LOW 36

Ajenti version 2 contains an Information Disclosure vulnerability in Line 176 of the code source that can result in user and system enumeration as well as data from the /etc/ajenti/config.yml file.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01558 Published 2018-03-13 No fix listed CWE-200

TI-2018-15738 CVE-2018-1000083 · GHSA-f576-rxff-hpmj

Ajenti version version 2 contains a Improper Error Handling vulnerability in Login JSON…

LOW 27

Ajenti version version 2 contains a Improper Error Handling vulnerability in Login JSON request that can result in The requisition leaks a path of the server.

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.01549 Published 2018-03-13 No fix listed CWE-22

TI-2018-15737 CVE-2018-1000082 · GHSA-2w58-27j5-f99h

Ajenti version version 2 contains a Cross ite Request Forgery (CSRF) vulnerability in the…

MEDIUM 41

Ajenti version version 2 contains a Cross ite Request Forgery (CSRF) vulnerability in the command execution panel of the tool used to manage the server.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.01279 Published 2018-03-13 No fix listed CWE-352

TI-2018-15736 CVE-2018-1000081 · GHSA-mp27-2772-552q

Ajenti version version 2 contains a Input Validation vulnerability in ID string on…

LOW 35

Ajenti version version 2 contains a Input Validation vulnerability in ID string on Get-values POST request that can result in Server Crashing.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01122 Published 2018-03-13 No fix listed CWE-20

TI-2018-15735 CVE-2018-1000080 · GHSA-mc57-hw6g-6hw2

Ajenti version version 2 contains a Insecure Permissions vulnerability in Plugins…

LOW 30

Ajenti version version 2 contains a Insecure Permissions vulnerability in Plugins download that can result in The download of any plugins as being a normal user.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00841 Published 2018-03-13 No fix listed CWE-732

TI-2014-03523 CVE-2014-4301 · GHSA-2ch8-f849-pjg3

Multiple cross-site scripting (XSS) vulnerabilities in the respond_error function in…

LOW 24

Multiple cross-site scripting (XSS) vulnerabilities in the respond_error function in routing.py in Eugene Pankov Ajenti before 1.2.21.7 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02292 Published 2014-06-18 Fixed in 1.2.21.7 CWE-79

TI-2014-01792 CVE-2014-2260 · GHSA-9crx-p357-5vw8

Cross-site scripting (XSS) vulnerability in plugins/main/content/js/ajenti.coffee in…

LOW 20

Cross-site scripting (XSS) vulnerability in plugins/main/content/js/ajenti.coffee in Eugene Pankov Ajenti 1.2.13 allows remote authenticated users to inject arbitrary web script or HTML via the command field in the Cron…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.01493 Published 2014-04-30 Fixed in 1.2.15 CWE-79

Vulnerabilities

Filters