webmin
- Total products in the ecosystem
- 3
- Total vulnerabilities (90 days)
- 5
en
A short verification protects source data and prevents automated AI requests.
Verifying...
As of 11/08/2026, webmin recorded 5 security vulnerabilities in the last 90 days across 2 products, including 3 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, usermin had the most security vulnerabilities in the webmin ecosystem, with 3 vulnerabilities—approximately 60% of the provider's total vulnerabilities during this period.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-124552Webmin through 2.670 Stored XSS via Shorewall and Shorewall6 list.cgiCVE-2026-123622Usermin through 2.570 XSS via mailbox detach.cgi type ParameterCVE-2026-123621Usermin through 2.570 Path Traversal File Write via detachall.cgiCVE-2026-123620Usermin through 2.570 OS Command Injection via Read Mail IMAP Folder DeletionCVE-2026-102337Webmin: SSRF exploit in Upload and Download and File Manager modules| Vulnerability | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2026-124552Webmin through 2.670 Stored XSS via Shorewall and Shorewall6 list.cgi | Exploitation statusNot confirmed | FixYes |
| Published11/08/2026 |
| SeverityMedium |
CVE-2026-123622Usermin through 2.570 XSS via mailbox detach.cgi type Parameter | Exploitation statusNot confirmed | FixYes | Affected productusermin | Published11/06/2026 | SeverityMedium |
|---|
CVE-2026-123621Usermin through 2.570 Path Traversal File Write via detachall.cgi | Exploitation statusActively exploited | FixYes | Affected productusermin | Published11/06/2026 | SeverityHigh |
|---|
CVE-2026-123620Usermin through 2.570 OS Command Injection via Read Mail IMAP Folder Deletion | Exploitation statusNot confirmed | FixYes | Affected productusermin | Published11/06/2026 | SeverityHigh |
|---|
CVE-2026-102337Webmin: SSRF exploit in Upload and Download and File Manager modules | Exploitation statusNot confirmed | FixYes | Affected productwebmin | Published11/04/2026 | SeverityMedium |
|---|
CVE-2026-49243Webmin: Reflected XSS in the Configuration module | Exploitation statusNot exploited | FixYes | Affected productwebmin | Published09/29/2026 | SeverityCritical |
|---|
CVE-2026-42210Webmin 2FA requirement bypass | Exploitation statusNot exploited | FixNo | Affected productwebmin | Published07/20/2026 | SeverityMedium |
|---|
CVE-2026-56022Webmin MFA bypass | Exploitation statusNot exploited | FixYes | Affected productwebmin | Published06/18/2026 | SeverityMedium |
|---|
CVE-2026-56021Webmin information disclosure via regex pattern | Exploitation statusNot exploited | FixNo | Affected productwebmin | Published06/18/2026 | SeverityMedium |
|---|
CVE-2026-56020Webmin HTTP header authentication bypass | Exploitation statusNot exploited | FixYes | Affected productwebmin | Published06/18/2026 | SeverityCritical |
|---|
CVE-2026-49103CVE-2026-49103 | Exploitation statusNot exploited | FixYes | Affected productwebmin | Published05/27/2026 | SeverityCritical |
|---|
CVE-2026-49102CVE-2026-49102 | Exploitation statusNot exploited | FixYes | Affected productwebmin | Published05/27/2026 | SeverityMedium |
|---|
CVE-2026-22678Webmin < 2.641 Stored XSS via System and Server Status | Exploitation statusNot exploited | FixYes | Affected productwebmin | Published05/21/2026 | SeverityMedium |
|---|
CVE-2025-67738CVE-2025-67738 | Exploitation statusNot exploited | FixYes | Affected productwebmin | Published12/11/2025 | SeverityHigh |
|---|
CVE-2024-12828Webmin CGI Command Injection Remote Code Execution Vulnerability | Exploitation statusNot exploited | FixNo | Affected productwebmin | Published12/30/2024 | SeverityCritical |
|---|
CVE-2024-36453CVE-2024-36453 | Exploitation statusNot exploited | FixNo | Affected productusermin | Published07/10/2024 | SeverityMedium |
|---|
CVE-2024-36452CVE-2024-36452 | Exploitation statusNot exploited | FixNo | Affected productwebmin | Published07/10/2024 | SeverityLow |
|---|
CVE-2024-36451CVE-2024-36451 | Exploitation statusNot exploited | FixNo | Affected productwebmin | Published07/10/2024 | SeverityHigh |
|---|
CVE-2024-36450CVE-2024-36450 | Exploitation statusNot exploited | FixNo | Affected productwebmin | Published07/10/2024 | SeverityMedium |
|---|
CVE-2022-0829Improper Authorization in webmin/webmin | Exploitation statusNot confirmed | FixYes | Affected productwebmin/webmin | Published03/02/2022 | SeverityMedium |
|---|
CVE-2022-0824Improper Access Control to Remote Code Execution in webmin/webmin | Exploitation statusNot confirmed | FixYes | Affected productwebmin/webmin | Published03/02/2022 | SeverityHigh |
|---|
CVE-2017-2106CVE-2017-2106 | Exploitation statusNot confirmed | FixNo | Affected productwebmin | Published04/28/2017 | SeverityUnknown |
|---|
21 Results | Page 1 of 1