Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
ajenti.plugin.core defines all necessary core elements to allow Ajenti to run properly. Prior to 0.112, if the 2FA was activated, it was possible during a short moment after the authentication of an user to bypass its authentication. This vulnerability is fixed in 0.112.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-40178 ajenti.plugin.core defines all necessary core elements to allow Ajenti to run properly. Prior to 0.112, if the 2FA was activated, it was possible during a short momen… https://www.cve.org/CVERecord?id=CVE-2026-40178
Post summary
The post briefly mentions CVE-2026-40178, indicating a 2FA-related issue in Ajenti pre‑0.112, but provides no details on exploitation, tooling, or remediation.
CVE-2026-40178 Authentication Bypass in Ajenti Plugin Core Versions Prior to 0.112 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-40178
Post summary
The notice identifies CVE‑2026‑40178 as an authentication bypass in Ajenti plugin core versions earlier than 0.112 but offers no additional details, proofs, or patches.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | ajenti | ajenti_plugin_core | - | - | - |