CVE-2018-1000126: Ajenti

High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days.

Ajenti version 2 contains an Information Disclosure vulnerability in Line 176 of the code source that can result in user and system enumeration as well as data from the /etc/ajenti/config.yml file. This attack appears to be exploitable via network connectivity to the web application.

Affected products

Published 2018-03-13. Last modified 2026-06-17.