All 7 CVE vulnerabilities found in ajenti, with AI-generated Chinese analysis, references, and POCs.
Vendor: unspecified
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-79920 | Ajenti: Privilege escalation to root via unauthenticated/unauthorized plugin install task CWE-862 | 9.9 | Critical | 2026-09-21 |
| CVE-2026-40178 | ajenti.plugin.core has a race conditions in 2FA CWE-287 | 8.1 | - | 2026-04-10 |
| CVE-2026-40177 | Password bypass when 2FA is activated CWE-287 | 9.8AI | Critical AI | 2026-04-10 |
| CVE-2026-35175 | Ajenti has an authorization bypass during custom package installation CWE-862 | 6.5AI | Medium AI | 2026-04-06 |
| CVE-2026-27975 | Ajenti has a potential Remote Code Execution CWE-284 | 9.8AI | Critical AI | 2026-02-26 |
| CVE-2020-37002 | Ajenti 2.1.36 Authenticated Remote Code Execution CWE-78 | 9.8 | Critical | 2026-01-29 |
| CVE-2019-25066 | ajenti API privileges management CWE-269 | 6.3 | Medium | 2022-06-09 |
All 7 known CVE vulnerabilities affecting ajenti with full Chinese analysis, references, and POCs where available.