Most recent entries from all

EUVD-2026-281084

2026-10-10T17:00:53.795438+00:00

EUVD-2026-281084

fkie_cve-2026-35175

2026-10-10T17:00:53.795471+00:00

Ajenti is a Linux and BSD modular server admin panel. Prior to 2.2.15, an authenticated user (using the auth_users plugin authentication method) could install a custom package even if this user is not superuser. This vulnerability is fixed in 2.2.15.

GHSA-73jv-44c3-j5p2 — Ajenti has an authorization bypass during custom package installation

2026-10-10T17:00:53.795503+00:00

Affected: PyPI: ajenti-panel

### Impact

An authenticated user (using the `auth_users` plugin authentication method) could install a custom package even if this user is not superuser.

### Patches

This is fixed in the version 2.2.15. Users should upgrade to this version as soon as possible.

PYSEC-2026-2339 — Ajenti has an authorization bypass during custom package installation

2026-10-10T17:00:53.795530+00:00

Affected: PyPI: ajenti-panel

### Impact

An authenticated user (using the `auth_users` plugin authentication method) could install a custom package even if this user is not superuser.

### Patches

This is fixed in the version 2.2.15. Users should upgrade to this version as soon as possible.