Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
ajenti.plugin.core defines all necessary core elements to allow Ajenti to run properly. Prior to 0.112, if the 2FA was activated, it was possible to bypass the password authentication This vulnerability is fixed in 0.112.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-04-10 | 3 | Disclosure2General1 |
| 2026-04-11 | 1 | Disclosure1 |
| 2026-04-13 | 1 | Disclosure1 |
| 2026-04-15 | 1 | Disclosure1 |
CVE-2026-40177 ajenti.plugin.core defines all necessary core elements to allow Ajenti to run properly. Prior to 0.112, if the 2FA was activated, it was possible to bypass the passwo… https://www.cve.org/CVERecord?id=CVE-2026-40177
Post summary
The text references CVE-2026-40177 as a 2FA bypass vulnerability in Ajenti’s core plugin, citing the CVE record link but offering no details on exploitation, tool, or patch.
Two critical command injection vulnerabilities, CVE-2026-40176 and CVE-2026-40177, have been found in Composer’s Perforce VCS driver—putting countless PHP applications at risk. Learn more: https://dailysecurityreview.com/resources/critical-security-flaws-in-composer-put-php-applications-at-risk/ https://t.co/9zivfP1lZf
Post summary
The post announces the discovery of two critical command injection CVEs (CVE-2026-40176 and CVE-2026-40177) affecting Composer’s Perforce VCS driver, warning that many PHP applications are at risk.
Warning: Critical Authentication Bypass (#AuthB) in #Ajenti Core plugin. CVE-2026-40177 CVSS(4.0): 9.3. If 2FA is activated, it's possible to bypass password authentication. https://github.com/ajenti/ajenti/security/advisories/GHSA-3mcx-6wxm-qr8v #Patch #Patch #Patch
Post summary
The statement announces a critical authentication bypass vulnerability (CVE-2026-40177) in Ajenti Core, supplying its CVSS score and linking to a GitHub security advisory.
A critical 2FA bypass (CVE-2026-40177) affects `ajenti.plugin.core`. Attackers can gain unauthorized access despite 2FA being active. Admins should review `ajenti` deployments and prepare for patches. #infosec #ajenti #cybersecurity https://www.pulsepatch.io/posts/cve-2026-40177-ajenti-plugin-core-2fa-bypass
Post summary
A critical 2FA bypass vulnerability (CVE-2026-40177) in ajenti.plugin.core has been disclosed, with administrators urged to review deployments and prepare for forthcoming patches; no proof of concept or active exploitation details are provided.
CVE-2026-40177 Authentication Bypass in Ajenti Plugin Core Versions Prior to 0.112 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-40177
Post summary
The text announces CVE-2026-40177 as an authentication bypass flaw affecting Ajenti Plugin Core versions earlier than 0.112, with no PoC, exploitation, or patch details provided.
🚨 CVE-2026-40177: Password bypass when 2FA is acti... Ajenti's 2FA implementation fails catastrophically - attackers can skip password auth entirely when MFA is enabled, tur... https://zerodaysignal.com/vulnerability/CVE-2026-40177 #netsec #vulnerability #CVE #sysadmin #zeroday
Post summary
The post announces CVE‑2026‑40177, noting a critical 2FA bypass in Ajenti that allows password skipping when MFA is enabled, without detailing PoCs, exploits, or fixes.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | ajenti | ajenti_plugin_core | - | - | - |