CVE-2026-27975
Received Received - Intake
Remote Code Execution in Ajenti Server Admin Panel (Pre

Publication date: 2026-02-26

Last updated on: 2026-03-02

Assigner: GitHub, Inc.

Description
Ajenti is a Linux and BSD modular server admin panel. Prior to version 2.2.13, an unauthenticated user could gain access to a server to execute arbitrary code on this server. This is fixed in the version 2.2.13.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-02-26
Last Modified
2026-03-02
Generated
2026-06-16
AI Q&A
2026-02-26
EPSS Evaluated
2026-06-15
NVD
CVE-2026-27975
EUVD
EUVD-2026-8832
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
ajenti ajenti to 2.2.13 (exc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-284 The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

CVE-2026-27975 is a critical Remote Code Execution vulnerability in Ajenti versions prior to 2.2.13.

This flaw allows an unauthenticated attacker to gain access to the server and execute arbitrary code remotely.

The issue has been fixed in Ajenti version 2.2.13.

Impact Analysis

An attacker exploiting this vulnerability can remotely execute arbitrary code on your server without any authentication.

This can lead to full compromise of the affected server, including unauthorized access, data theft, service disruption, or further attacks within your network.

Compliance Impact

I don't know

Detection Guidance

I don't know

Mitigation Strategies

To mitigate the CVE-2026-27975 vulnerability in Ajenti, you should immediately upgrade Ajenti to version 2.2.13 or later.

This update includes important security fixes such as enhanced validation checks on HTTP headers and improvements in cache management, which prevent unauthorized remote code execution.

Applying this update will close the critical security gap that allows unauthenticated users to execute arbitrary code on the server.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-27975. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart