Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization via the authusers plugin authentication method, an authenticated user could install a custom package even if this user is not a superuser. Remediation Upgrade ajenti-panel to version 2.2.15 or higher. References -...

CVE-2026-27975

Ajenti, a Linux/BSD modular server admin panel, is affected by CVE-2026-27975 in versions prior to 2.2.13. An unauthenticated user could gain access to a server and execute arbitrary code. The vulnerability is rated CVSS v4.0 base score 9.3 (CRITICAL) with network attack vector, no authentication...