CVE-2022-0824

Improper Access Control to Remote Code Execution in webmin/webmin

8.3 HighPublic exploit

Improper Access Control to Remote Code Execution in GitHub repository webmin/webmin prior to 1.990.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: Low
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: Low

Exploit likelihood

97.0%Up 93.0 points since Mar 3, 2022

What each source reports

CVE List Score used 8.3

Improper Access Control to Remote Code Execution in webmin/webmin

Improper Access Control to Remote Code Execution in GitHub repository webmin/webmin prior to 1.990.

Record: CVE-2022-0824
CVSS 3.0: 8.3 HighCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
Weakness: CWE-284
Updated: 2026-11-02

EUVDEUVD-2022-15872 8.3

Improper Access Control to Remote Code Execution in GitHub repository webmin/webmin prior to 1.990.

Record: EUVD-2022-15872
CVSS 3.0: 8.3 HighCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
Updated: 2026-11-03

GitHub AdvisoriesGHSA-vw87-2p2h-8rp3 8.8

Improper Access Control to Remote Code Execution in GitHub repository webmin/webmin prior to 1.990.

Improper Access Control to Remote Code Execution in GitHub repository webmin/webmin prior to 1.990.

Record: GHSA-vw87-2p2h-8rp3
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-284, CWE-863
Updated: 2026-11-02

NVD 8.8

Improper Access Control to Remote Code Execution in GitHub repository webmin/webmin prior to 1.990.

Record: CVE-2022-0824
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 3.0: 8.3 HighCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
CVSS 2.0: 9.0 HighAV:N/AC:L/Au:S/C:C/I:C/A:C
Weakness: CWE-284, CWE-863
Updated: 2026-11-02

OSV 8.3

Improper Access Control to Remote Code Execution in webmin/webmin

Improper Access Control to Remote Code Execution in GitHub repository webmin/webmin prior to 1.990.

Record: CVE-2022-0824
CVSS 3.0: 8.3 HighCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
Weakness: CWE-284
Updated: 2026-11-02

OSVMGASA-2022-0090 No score

Updated webmin packages fix security vulnerability

Less privileged Webmin users who do not have any File Manager module restrictions configured can access files with root privileges, if using the default Authentic theme (CVE-2022-0824, CVE-2022-0829).

Record: MGASA-2022-0090
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`webmin` Mageia:8 From an advisory covering 2 CVEs	before 1.990-1.mga8	1.990-1.mga8

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Metasploit	Webmin File Manager RCE	2022-02-26
PoC in GitHub	faisalfs10x/Webmin-CVE-2022-0824-revshell	2022-03-06
Exploit-DB	Webmin 1.984 - Remote Code Execution (Authenticated)	2022-03-09
PoC in GitHub	pizza-power/golang-webmin-CVE-2022-0824-revshell	2022-10-17
PoC in GitHub	gokul-ramesh/WebminRCE-exploit	2022-11-08
PoC in GitHub	NUDTTAN91/Webmin-CVE-2022-0824-Enhanced-Exploit	2025-08-05
Nuclei	Webmin <1.990 - Improper Access Control

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, exploits, facts
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, Exploit-DB, GitHub Advisories, Metasploit, Nuclei, NVD, OSV, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2022-0824 is a high vulnerability (CVSS 8.3) in Webmin, published March 2, 2022. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 97.0%, the 99th percentile. No source names a fixed version.

References

Show 6 moreShow less