Skip to content
OpenAdvisories

Vendor

Webmin

26 known vulnerabilities.

Products

Webmin 21 Usermin 4 webmin/webmin 2
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.6
    CVE-2026-49243

    Webmin: Reflected XSS in the Configuration module

    Webmin is a web-based system administration tool for Unix-like servers. Prior to version 2.650, Webmin users who click on a malicious link to their server are vulnerable to this XSS vulnerability that could be used to execute attacker-controlled commands. Thi…

    Webmin Webmin
  • Critical 9.4
    CVE-2026-49103

    Webmin before 2.640 does not safely construct a filename for saving of an attachment within the mailboxes component. Th…

    Webmin Webmin
  • Critical 9.9
    CVE-2024-12828 Public exploit EPSS 33%

    Webmin CGI Command Injection Remote Code Execution Vulnerability

    Webmin CGI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Webmin. Authentication is required to exploit this vulnerability. The specific flaw exists with…

    Webmin Webmin