Approved changes feed: RSS · Atom

cpe:2.3:a:ajenti:ajenti_plugin_core:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAjenti (2b22262f-7a72-5647-a13c-c19ec85e1651)
ProductAjenti Plugin Core (93b6a62e-2b50-5d6a-8205-c1ac77a29a7b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/ajenti/ajenti purl2cpe 2026-06-01 10:15:30.243140

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-40178 vulnerable 2026-06-08 08:01:20.003804 ajenti.plugin.core has a race conditions in 2FA
ajenti.plugin.core defines all necessary core elements to allow Ajenti to run properly. Prior to 0.112, if the 2FA was activated, it was possible during a short moment after the authentication of an user to bypass its authentication. This vulnerability is fixed in 0.112.
Published: 2026-04-10T19:30:47.083Z
Updated: 2026-04-14T03:55:43.193Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-40177 vulnerable 2026-06-08 08:01:20.003287 Password bypass when 2FA is activated
ajenti.plugin.core defines all necessary core elements to allow Ajenti to run properly. Prior to 0.112, if the 2FA was activated, it was possible to bypass the password authentication This vulnerability is fixed in 0.112.
Published: 2026-04-10T19:29:00.851Z
Updated: 2026-04-14T13:26:56.925Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.