Webmin vulnerabilities

CVEs per yearBy the year they were published

1. 20171
2. 20222
3. 20245
4. 20251
5. 202613

Newest CVEs

• CVE-2026-124552

  Webmin through 2.670 Stored XSS via Shorewall and Shorewall6 list.cgi

  webmin · webmin

  Medium4.8
• CVE-2026-123622

  Usermin through 2.570 XSS via mailbox detach.cgi type Parameter

  webmin · usermin

  Medium5.1
• CVE-2026-123621

  Usermin through 2.570 Path Traversal File Write via detachall.cgi

  webmin · usermin

  High8.6
• CVE-2026-123620

  Usermin through 2.570 OS Command Injection via Read Mail IMAP Folder Deletion

  webmin · usermin

  High7.7
• CVE-2026-102337

  Webmin: SSRF exploit in Upload and Download and File Manager modules

  webmin · webmin

  Medium4.9
• CVE-2026-49243

  Webmin: Reflected XSS in the Configuration module

  webmin · webmin

  Critical9.6
• CVE-2026-42210

  Webmin 2FA requirement bypass

  webmin · webmin

  Medium5.3
• CVE-2026-56020

  Webmin HTTP header authentication bypass

  Webmin · Webmin

  Critical9.2
• CVE-2026-56021

  Webmin information disclosure via regex pattern

  Webmin · Webmin

  Medium6.9
• CVE-2026-56022

  Webmin MFA bypass

  Webmin · Webmin

  Medium6.9