{"id":"CVE-2026-27975","aliases":["GHSA-vcw3-r3fx-j444"],"url":"https://o3.security/vulnerability/CVE-2026-27975","summary":"Ajenti has a potential Remote Code Execution","details":"Ajenti is a Linux and BSD modular server admin panel. Prior to version 2.2.13, an unauthenticated user could gain access to a server to execute arbitrary code on this server. This is fixed in the version 2.2.13.","published":"2026-02-26T02:39:28.283Z","modified":"2026-10-28T02:31:01.140091908Z","cvss":null,"epss":null,"cisaKev":null,"exploitsKnown":null,"affectedPackages":[{"ecosystem":"PyPI","name":"aj","fixedVersion":"2.2.13"}],"fix":null,"references":[{"type":"WEB","url":"https://github.com/ajenti/ajenti/releases/tag/v2.2.13"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/27xxx/CVE-2026-27975.json"},{"type":"ADVISORY","url":"https://github.com/ajenti/ajenti/security/advisories/GHSA-vcw3-r3fx-j444"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-27975"},{"type":"PACKAGE","url":"https://github.com/ajenti/ajenti"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-10-28T02:31:01.140091908Z"}}