[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-79920":6},{"stargazers_count":4,"fetched_at":5},8,"2026-09-21T21:38:57.784Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":229,"aliases":230,"duplicate_of":9,"upstream":231,"downstream":232,"duplicates":233,"related":234,"reserved_at":9,"published_at":235,"modified_at":236,"state":237,"summary":238,"references_raw":245,"kevs":265,"epss":9,"epss_history":266,"metrics":267,"affected":275},"CVE-2026-79920","Ajenti is a Linux & BSD modular server admin panel. Prior to version 2.2.16, any authenticated user can call /api/core/tasks/start to enqueue InstallPlugin, UnInstallPlugin, or UpgradeAll from plugins/plugins/tasks.py without plugin-management authorization. InstallPlugin and UnInstallPlugin construct a pip package specification from unvalidated name and version fields, and the task worker invokes pip while running as root. A low-privileged user can therefore select or manipulate a package installed with root privileges and can install, remove, or upgrade plugins without administrative permission, resulting in root code execution and full host compromise. This issue is fixed in version 2.2.16.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-862","Missing Authorization","The product does not perform an authorization check when an actor attempts to access a resource or perform an action.","weakness","Incomplete","Class","High",[20],{"id":21,"name":22,"techniques":23},"CAPEC-665","Exploitation of Thunderbolt Protection Flaws",[24,61,101],{"id":25,"name":26,"tactics":27,"countermeasures":34},"T1211","Exploitation for Stealth",[28,31],{"id":29,"name":30},"TA0030","Defense Evasion",{"id":32,"name":33},"TA0005","Stealth",[35,40,45,49,53,57],{"id":36,"name":37,"tactic":38},"D3-PSEP","Process Segment Execution Prevention",{"name":39},"Harden",{"id":41,"name":42,"tactic":43},"D3-MBT","Memory Boundary Tracking",{"name":44},"Detect",{"id":46,"name":47,"tactic":48},"D3-PCSV","Process Code Segment Verification",{"name":44},{"id":50,"name":51,"tactic":52},"D3-SFCV","Stack Frame Canary Validation",{"name":39},{"id":54,"name":55,"tactic":56},"D3-SSC","Shadow Stack Comparisons",{"name":44},{"id":58,"name":59,"tactic":60},"D3-SAOR","Segment Address Offset Randomization",{"name":39},{"id":62,"name":63,"tactics":64,"countermeasures":70},"T1542.002","Component Firmware",[65,66,67],{"id":29,"name":30},{"id":32,"name":33},{"id":68,"name":69},"TA0110","Persistence",[71,75,79,83,87,92,97],{"id":72,"name":73,"tactic":74},"D3-FEMC","Firmware Embedded Monitoring Code",{"name":44},{"id":76,"name":77,"tactic":78},"D3-FV","Firmware Verification",{"name":44},{"id":80,"name":81,"tactic":82},"D3-FBA","Firmware Behavior Analysis",{"name":44},{"id":84,"name":85,"tactic":86},"D3-SU","Software Update",{"name":39},{"id":88,"name":89,"tactic":90},"D3-SWI","Software Inventory",{"name":91},"Model",{"id":93,"name":94,"tactic":95},"D3-RS","Restore Software",{"name":96},"Restore",{"id":98,"name":99,"tactic":100},"D3-AVE","Asset Vulnerability Enumeration",{"name":91},{"id":102,"name":103,"tactics":104,"countermeasures":113},"T1556","Modify Authentication Process",[105,106,109,110],{"id":29,"name":30},{"id":107,"name":108},"TA0112","Defense Impairment",{"id":68,"name":69},{"id":111,"name":112},"TA0031","Credential Access",[114,119,123,128,132,136,140,144,148,152,156,160,164,168,173,177,181,185,189,193,197,201,205,209,213,217,221,225],{"id":115,"name":116,"tactic":117},"D3-LFP","Local File Permissions",{"name":118},"Isolate",{"id":120,"name":121,"tactic":122},"D3-HBPI","Hardware-based Process Isolation",{"name":118},{"id":124,"name":125,"tactic":126},"D3-FEV","File Eviction",{"name":127},"Evict",{"id":129,"name":130,"tactic":131},"D3-HS","Host Shutdown",{"name":127},{"id":133,"name":134,"tactic":135},"D3-PSMD","Process Self-Modification Detection",{"name":44},{"id":137,"name":138,"tactic":139},"D3-CQ","Content Quarantine",{"name":118},{"id":141,"name":142,"tactic":143},"D3-ABPI","Application-based Process Isolation",{"name":118},{"id":145,"name":146,"tactic":147},"D3-SFA","System File Analysis",{"name":44},{"id":149,"name":150,"tactic":151},"D3-PT","Process Termination",{"name":127},{"id":153,"name":154,"tactic":155},"D3-SCF","System Call Filtering",{"name":118},{"id":157,"name":158,"tactic":159},"D3-AM","Access Modeling",{"name":91},{"id":161,"name":162,"tactic":163},"D3-RC","Restore Configuration",{"name":96},{"id":165,"name":166,"tactic":167},"D3-FE","File Encryption",{"name":39},{"id":169,"name":170,"tactic":171},"D3-DF","Decoy File",{"name":172},"Deceive",{"id":174,"name":175,"tactic":176},"D3-FIM","File Integrity Monitoring",{"name":44},{"id":178,"name":179,"tactic":180},"D3-CF","Content Filtering",{"name":118},{"id":182,"name":183,"tactic":184},"D3-FA","File Analysis",{"name":44},{"id":186,"name":187,"tactic":188},"D3-WSAM","Web Session Access Mediation",{"name":118},{"id":190,"name":191,"tactic":192},"D3-CI","Configuration Inventory",{"name":91},{"id":194,"name":195,"tactic":196},"D3-RF","Restore File",{"name":96},{"id":198,"name":199,"tactic":200},"D3-PSA","Process Spawn Analysis",{"name":44},{"id":202,"name":203,"tactic":204},"D3-PLA","Process Lineage Analysis",{"name":44},{"id":206,"name":207,"tactic":208},"D3-RFAM","Remote File Access Mediation",{"name":118},{"id":210,"name":211,"tactic":212},"D3-CM","Content Modification",{"name":118},{"id":214,"name":215,"tactic":216},"D3-NTPM","Network Traffic Policy Mapping",{"name":91},{"id":218,"name":219,"tactic":220},"D3-KBPI","Kernel-based Process Isolation",{"name":118},{"id":222,"name":223,"tactic":224},"D3-PS","Process Suspension",{"name":127},{"id":226,"name":227,"tactic":228},"D3-HR","Host Reboot",{"name":127},[],[],[],[],[],[],"2026-09-21T16:35:03.193Z","2026-09-21T18:57:20.885Z","Received",{"cisa_kev":239,"cisa_ransomware":239,"cisa_vendor":9,"epss_severity":9,"epss_score":9,"severity":240,"severity_score":241,"severity_version":242,"severity_source":243,"severity_vector":244,"severity_status":237},false,"critical",9.9,"v3.1","cve.org","CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",[246,252,257,261],{"url":247,"sources":248,"tags":250},"https://github.com/ajenti/ajenti/security/advisories/GHSA-j8xf-5fw2-f99q",[243,249],"nvd",[251],"X Refsource CONFIRM",{"url":253,"sources":254,"tags":255},"https://github.com/ajenti/ajenti/commit/3a8cbee32df4c5033796f19af4210011163a6f6e",[243,249],[256],"X Refsource MISC",{"url":258,"sources":259,"tags":260},"https://github.com/ajenti/ajenti/commit/f07f02e0cdeeb3e528c1d5af28e27fd11623c49c",[243,249],[256],{"url":262,"sources":263,"tags":264},"https://github.com/ajenti/ajenti/releases/tag/v2.2.16",[243,249],[256],[],[],[268,273],{"source":243,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":269,"cvss_v4_0":9},{"baseScore":241,"baseSeverity":270,"vectorString":244,"impactScore":271,"exploitabilityScore":272},"CRITICAL",10,7.9,{"source":249,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":274,"cvss_v4_0":9},{"baseScore":241,"baseSeverity":270,"vectorString":244,"impactScore":271,"exploitabilityScore":272},[276],{"ecosystem":9,"name":277,"vendor":277,"product":277,"cpe_part":278,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":279},"ajenti","a",[280],{"version":281,"is_range":282,"range_type":243,"version_start":9,"version_start_type":9,"version_end":283,"version_end_type":284,"fixed_in":9},"\u003C 2.2.16",true,"2.2.16","excluding"]