CRITICALCVSS 9.8Vulnerability

CVE-2026-27975

### Impact An unauthenticated user could gain access to a server to execute arbitrary code on this server. ### Patches This is fixed in the version 2.2.13. Users should upgrade to this version as soon as possible.

Properties

Summary
Ajenti has potential Remote Code Execution
Severity
high
Cvss score
9.8
Retrieved at
2026-10-27T15:31:30+00:00
Ghsa published
2026-10-27T13:27:58Z
Source url
https://github.com/advisories/GHSA-vcw3-r3fx-j444
Ghsa updated
2026-10-27T13:28:00Z
Ghsa id
GHSA-vcw3-r3fx-j444
Last source
GitHub Advisory Database
Cve id
CVE-2026-27975
Cvss vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
First seen by Signal
2026-10-27T15:31:30+00:00
Is ghsa only
false

Related Entities (3)

AFFECTS (1)

→[Software]pip/aj

HAS_WEAKNESS (1)

VULNERABLE_TO (1)

←[Software]pip/aj

Explore deeper with Ninja Signal's threat intelligence graph

CVE-2026-27975 (CVSS 9.8) — Ninja Signal Threat Intelligence | Ninja Signal