Skip to content
OpenAdvisories

Vendor

Webmin

24 known vulnerabilities.

Products

Webmin 19 Usermin 4 webmin/webmin 2
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 4.8
    CVE-2026-124552 Public exploit

    Webmin through 2.670 Stored XSS via Shorewall and Shorewall6 list.cgi

    Webmin through 2.670 contains a stored cross-site scripting vulnerability in the Shorewall and Shorewall6 modules' list.cgi, which renders table fields and COMMENT lines unescaped. Authenticated users with table edit permission can store JavaScript via savecm…

    Webmin Webmin
  • Critical 9.9
    CVE-2024-12828 Public exploit EPSS 33%

    Webmin CGI Command Injection Remote Code Execution Vulnerability

    Webmin CGI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Webmin. Authentication is required to exploit this vulnerability. The specific flaw exists with…

    Webmin Webmin
  • High 8.3
    CVE-2022-0824 Public exploit EPSS 97%

    Improper Access Control to Remote Code Execution in webmin/webmin

    Improper Access Control to Remote Code Execution in GitHub repository webmin/webmin prior to 1.990.

    Webmin webmin/webmin