Approved changes feed: RSS · Atom

cpe:2.3:a:ajenti_project:ajenti:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAjenti Project (e87d9748-8528-5cde-9a74-87e81bcc9c7f)
ProductAjenti (6db087dc-071c-5c79-8e7e-06b70e7c220d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-37002 vulnerable 2026-06-08 05:25:49.986389 Ajenti 2.1.36 Authenticated Remote Code Execution
CRITICAL (9.8)
Ajenti 2.1.36 contains a post-authenticated remote command execution vulnerability that allows remote attackers to execute arbitrary commands after successful login. Attackers can leverage the /api/terminal/create endpoint to send a netcat reverse shell payload targeting a specified IP and port.
Published: 2026-01-29T14:28:28.169Z
Updated: 2026-05-25T23:41:10.197Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.