Skip to content
CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2026-40177

Password bypass when 2FA is activated

Description

ajenti.plugin.core defines all necessary core elements to allow Ajenti to run properly. Prior to 0.112, if the 2FA was activated, it was possible to bypass the password authentication This vulnerability is fixed in 0.112.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ajenti ajenti

  • < 0.112affected

References