PT-2026-22120 · Ajenti · Ajenti

Wcakir · Publicado 2026-02-26 · Atualizado 2026-03-03 · CVE-2026-27975

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Ajenti versions prior to 2.2.13

Description Ajenti is a modular server admin panel for Linux and BSD. Before version 2.2.13, an unauthenticated user could gain access to a server and execute arbitrary code. The issue is resolved in version 2.2.13. The vulnerability allows for the execution of arbitrary code on the server.

Recommendations Update to version 2.2.13 or later.

Exploit

Correção

RCE

Improper Access Control

Enumeração de Fraquezas

CWE-284

Identificadores relacionados

CVE-2026-27975

GHSA-VCW3-R3FX-J444

Produtos afetados

Ajenti

Referências · 10

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/27xxx/CVE-2026-27975.json · Exploit
• https://github.com/ajenti/ajenti/releases/tag/v2.2.13 · Nota
• https://github.com/ajenti/ajenti/security/advisories/GHSA-vcw3-r3fx-j444 · Aviso do Fabricante
• https://twitter.com/cracbot/status/2028787652976345575 · Publicação no Twitter
• https://t.me/cveNotify/153779 · Publicação no Telegram
• https://twitter.com/CVEnew/status/2027004201725825493 · Publicação no Twitter
• https://twitter.com/TheHackerWire/status/2028526035348894078 · Publicação no Twitter
• https://t.me/CVEtracker/45827 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2026-27975 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2026-27975 · Aviso do Fabricante