Description
Webmin is a web-based system administration tool for Unix-like servers. Prior to version 2.650, Webmin users who click on a malicious link to their server are vulnerable to this XSS vulnerability that could be used to execute attacker-controlled commands. This issue has been patched in version 2.650.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| webmin | webmin | < 2.650 | — |
Advisories 1
- WID-SEC-2026-3645 Webmin: Schwachstelle ermöglicht Cross-Site Scripting BSI CERT-Bund (WID) · Sep 29, 2026