PT-2026-22120 · Ajenti · Ajenti

Wcakir · Published 2026-02-26 · Updated 2026-03-03 · CVE-2026-27975

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Ajenti versions prior to 2.2.13

Description Ajenti is a modular server admin panel for Linux and BSD. Before version 2.2.13, an unauthenticated user could gain access to a server and execute arbitrary code. The issue is resolved in version 2.2.13. The vulnerability allows for the execution of arbitrary code on the server.

Recommendations Update to version 2.2.13 or later.

Exploit

Fix

RCE

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2026-27975

GHSA-VCW3-R3FX-J444

Affected Products

Ajenti

References · 10

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/27xxx/CVE-2026-27975.json · Exploit
• https://github.com/ajenti/ajenti/security/advisories/GHSA-vcw3-r3fx-j444 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-27975 · Security Note
• https://osv.dev/vulnerability/CVE-2026-27975 · Vendor Advisory
• https://github.com/ajenti/ajenti/releases/tag/v2.2.13 · Note
• https://twitter.com/cracbot/status/2028787652976345575 · Twitter Post
• https://t.me/cveNotify/153779 · Telegram Post
• https://twitter.com/CVEnew/status/2027004201725825493 · Twitter Post
• https://twitter.com/TheHackerWire/status/2028526035348894078 · Twitter Post
• https://t.me/CVEtracker/45827 · Telegram Post