QwikSec

Security Database

CVE

CWE

Training

CVE-2026-40178

Published: Apr 10, 2026

Modified: Apr 14, 2026

PUBLISHED

Description

ajenti.plugin.core defines all necessary core elements to allow Ajenti to run properly. Prior to 0.112, if the 2FA was activated, it was possible during a short moment after the authentication of an user to bypass its authentication. This vulnerability is fixed in 0.112.

Vendor	Product	Versions
ajenti	ajenti	affected `< 0.112`

Weaknesses (CWE)

References

https://github.com/ajenti/ajenti/security/advisories/GHSA-8647-755q-fw9p

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.