CVE-2026-35175
UNKNOWN
NVD
CVSS Score
0
Severity
UNKNOWN
Published
Apr 06, 2026
Vendor
unknown
Description
Ajenti is a Linux and BSD modular server admin panel. Prior to 2.2.15, an authenticated user (using the auth_users plugin authentication method) could install a custom package even if this user is not superuser. This vulnerability is fixed in 2.2.15.