https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T14:04:36.429231+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-291074 EUVD-2026-291074 2026-10-09T14:04:36.507996+00:00 EUVD-2026-291074 https://cve.radiocsirt.org/vuln/fkie_cve-2026-40178 fkie_cve-2026-40178 2026-10-09T14:04:36.508058+00:00

ajenti.plugin.core defines all necessary core elements to allow Ajenti to run properly. Prior to 0.112, if the 2FA was activated, it was possible during a short moment after the authentication of an user to bypass its authentication. This vulnerability is fixed in 0.112.

 https://cve.radiocsirt.org/vuln/ghsa-8647-755q-fw9p GHSA-8647-755q-fw9p — ajenti.plugin.core has race conditions in 2FA 2026-10-09T14:04:36.508105+00:00

Affected: PyPI: ajenti.plugin.core

### Impact

If the 2FA was activated, it was possible during a short moment after the authentication of an user to bypass its authentication.

### Patches

This is fixed in the version 0.112. Users should upgrade to this version as soon as possible.

 https://cve.radiocsirt.org/vuln/pysec-2026-2340 PYSEC-2026-2340 — ajenti.plugin.core has race conditions in 2FA 2026-10-09T14:04:36.508149+00:00

Affected: PyPI: ajenti-plugin-core

### Impact

If the 2FA was activated, it was possible during a short moment after the authentication of an user to bypass its authentication.

### Patches

This is fixed in the version 0.112. Users should upgrade to this version as soon as possible.