CVE-2026-27975

Received Received - Intake

Remote Code Execution in Ajenti Server Admin Panel (Pre

Publication date: 2026-02-26

Last updated on: 2026-03-02

Assigner: GitHub, Inc.

Description

Ajenti is a Linux and BSD modular server admin panel. Prior to version 2.2.13, an unauthenticated user could gain access to a server to execute arbitrary code on this server. This is fixed in the version 2.2.13.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-02-26

Last Modified

2026-03-02

Generated

2026-07-06

AI Q&A

2026-02-26

EPSS Evaluated

2026-07-05

NVD

CVE-2026-27975

EUVD

EUVD-2026-8832

Affected Vendors & Products

Vendor	Product	Version / Range
ajenti	ajenti	to 2.2.13 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-284	The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

Attack-Flow Graph

Executive Summary

CVE-2026-27975 is a critical Remote Code Execution vulnerability in Ajenti versions prior to 2.2.13.

This flaw allows an unauthenticated attacker to gain access to the server and execute arbitrary code remotely.

The issue has been fixed in Ajenti version 2.2.13.

Impact Analysis

An attacker exploiting this vulnerability can remotely execute arbitrary code on your server without any authentication.

This can lead to full compromise of the affected server, including unauthorized access, data theft, service disruption, or further attacks within your network.

Compliance Impact

I don't know

Detection Guidance

I don't know

Mitigation Strategies

To mitigate the CVE-2026-27975 vulnerability in Ajenti, you should immediately upgrade Ajenti to version 2.2.13 or later.

This update includes important security fixes such as enhanced validation checks on HTTP headers and improvements in cache management, which prevent unauthorized remote code execution.

Applying this update will close the critical security gap that allows unauthenticated users to execute arbitrary code on the server.

Hi! I’m here to help you understand CVE-2026-27975. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70