https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 20:50:31 +0000 https://vulnerability.circl.lu/vuln/cve-2026-35175 <p><strong>Affected:</strong> ajenti</p> <p>Ajenti is a Linux and BSD modular server admin panel. Prior to 2.2.15, an authenticated user (using the auth_users plugin authentication method) could install a custom package even if this user is not superuser. This vulnerability is fixed in 2.2.15.</p> <p><strong>Affected:</strong> ajenti</p> <p>Ajenti is a Linux and BSD modular server admin panel. Prior to 2.2.15, an authenticated user (using the auth_users plugin authentication method) could install a custom package even if this user is not superuser. This vulnerability is fixed in 2.2.15.</p> https://vulnerability.circl.lu/vuln/cve-2026-35175 https://vulnerability.circl.lu/vuln/pysec-2026-2339 <p><strong>Affected:</strong> PyPI: ajenti-panel</p> <p>### Impact</p> <p>An authenticated user (using the `auth_users` plugin authentication method) could install a custom package even if this user is not superuser.</p> <p>### Patches</p> <p>This is fixed in the version 2.2.15. Users should upgrade to this version as soon as possible.</p> <p><strong>Affected:</strong> PyPI: ajenti-panel</p> <p>### Impact</p> <p>An authenticated user (using the `auth_users` plugin authentication method) could install a custom package even if this user is not superuser.</p> <p>### Patches</p> <p>This is fixed in the version 2.2.15. Users should upgrade to this version as soon as possible.</p> https://vulnerability.circl.lu/vuln/pysec-2026-2339