CVE-2026-56022MEDIO 5.3Webmin accepts basic authentication without session cookies when an attacker provides the 'User-Agent: webmin' header, allowing bypass of ad…
CVE-2026-56021MEDIO 5.3Webmin allows unauthenticated attackers to read the contents of any file ending in .conf within module directories, due to a bypassable rege…
CVE-2026-22678MEDIO 5.4Webmin before 2.641 contains a stored cross-site scripting vulnerability in the email template description field of the System and Server St…
CVE-2025-61541ALTO 7.1Webmin 2.510 is vulnerable to a Host Header Injection in the password reset functionality (forgot_send.cgi). The reset link sent to users is…
CVE-2024-12828ALTO 8.8Webmin CGI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on af…