Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 17:00:50 +0000 EUVD-2026-281084 https://cve.radiocsirt.org/vuln/euvd-2026-281084 EUVD-2026-281084 https://cve.radiocsirt.org/vuln/euvd-2026-281084 fkie_cve-2026-35175 https://cve.radiocsirt.org/vuln/fkie_cve-2026-35175 <p>Ajenti is a Linux and BSD modular server admin panel. Prior to 2.2.15, an authenticated user (using the auth_users plugin authentication method) could install a custom package even if this user is not superuser. This vulnerability is fixed in 2.2.15.</p> <p>Ajenti is a Linux and BSD modular server admin panel. Prior to 2.2.15, an authenticated user (using the auth_users plugin authentication method) could install a custom package even if this user is not superuser. This vulnerability is fixed in 2.2.15.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-35175 GHSA-73jv-44c3-j5p2 — Ajenti has an authorization bypass during custom package installation https://cve.radiocsirt.org/vuln/ghsa-73jv-44c3-j5p2 <p><strong>Affected:</strong> PyPI: ajenti-panel</p> <p>### Impact</p> <p>An authenticated user (using the `auth_users` plugin authentication method) could install a custom package even if this user is not superuser.</p> <p>### Patches</p> <p>This is fixed in the version 2.2.15. Users should upgrade to this version as soon as possible.</p> <p><strong>Affected:</strong> PyPI: ajenti-panel</p> <p>### Impact</p> <p>An authenticated user (using the `auth_users` plugin authentication method) could install a custom package even if this user is not superuser.</p> <p>### Patches</p> <p>This is fixed in the version 2.2.15. Users should upgrade to this version as soon as possible.</p> https://cve.radiocsirt.org/vuln/ghsa-73jv-44c3-j5p2 PYSEC-2026-2339 — Ajenti has an authorization bypass during custom package installation https://cve.radiocsirt.org/vuln/pysec-2026-2339 <p><strong>Affected:</strong> PyPI: ajenti-panel</p> <p>### Impact</p> <p>An authenticated user (using the `auth_users` plugin authentication method) could install a custom package even if this user is not superuser.</p> <p>### Patches</p> <p>This is fixed in the version 2.2.15. Users should upgrade to this version as soon as possible.</p> <p><strong>Affected:</strong> PyPI: ajenti-panel</p> <p>### Impact</p> <p>An authenticated user (using the `auth_users` plugin authentication method) could install a custom package even if this user is not superuser.</p> <p>### Patches</p> <p>This is fixed in the version 2.2.15. Users should upgrade to this version as soon as possible.</p> https://cve.radiocsirt.org/vuln/pysec-2026-2339