Webmin vulnerabilities

Products

• Webmin 102
• Usermin 22
• Webmin/webmin 2

Newest

• webmin Webmin: Reflected XSS in the Configuration module CVE-2026-49243 9.6 CriticalSeptember 29, 2026
• webmin Webmin 2FA requirement bypass CVE-2026-42210 5.3 MediumJuly 20, 2026
• webmin Webmin HTTP header authentication bypass CVE-2026-56020 9.2 CriticalJune 18, 2026
• webmin Webmin information disclosure via regex pattern CVE-2026-56021 6.9 MediumJune 18, 2026
• webmin Webmin MFA bypass CVE-2026-56022 6.9 MediumJune 18, 2026
• webmin Webmin before 2.640 does not safely construct a filename for saving of an attachment within the... CVE-2026-49103 9.4 CriticalMay 27, 2026
• webmin Webmin before 2.640 allows mailboxes/detach.cgi XSS via an SVG document attachment that is viewed... CVE-2026-49102 6.1 MediumMay 27, 2026
• webmin Webmin < 2.641 Stored XSS via System and Server Status CVE-2026-22678 5.1 MediumMay 21, 2026
• webmin squid/cachemgr.cgi in Webmin before 2.600 does not properly quote arguments. This is relevant if... CVE-2025-67738 8.5 HighDecember 11, 2025
• webmin Webmin 2.510 is vulnerable to a Host Header Injection in the password reset functionality ... CVE-2025-61541 7.1 HighOctober 16, 2025
• usermin Usermin 0.980 through 1.x before 1.660 allows uconfig_save.cgi sig_file_free remote code... CVE-2015-2079 9.9 CriticalApril 28, 2025
• webmin Webmin CGI Command Injection Remote Code Execution Vulnerability CVE-2024-12828 Public exploit EPSS 33.3% 9.9 CriticalDecember 30, 2024
• webmin usermin A discrepancy in error messages for invalid login attempts in Webmin Usermin v2.100 allows... CVE-2024-44762 Public exploit 5.3 MediumOctober 16, 2024
• virtualmin, webmin +1 more Webmin before 2.202 and Virtualmin before 7.20.2 allow a network traffic loop via spoofed UDP... CVE-2024-45692 7.5 HighSeptember 4, 2024
• usermin, webmin +1 more Cross-site scripting vulnerability exists in session_login.cgi of Webmin versions prior to 1.970... CVE-2024-36453 6.1 MediumJuly 10, 2024
• webmin Cross-site request forgery vulnerability exists in ajaxterm module of Webmin versions prior to 2... CVE-2024-36452 3.1 LowJuly 10, 2024
• gentoo webmin Improper handling of insufficient permissions or privileges vulnerability exists in ajaxterm... CVE-2024-36451 8.8 HighJuly 10, 2024
• webmin Cross-site scripting vulnerability exists in sysinfo.cgi of Webmin versions prior to 1.910. If... CVE-2024-36450 5.4 MediumJuly 10, 2024
• webmin Cross Site Scripting vulnerability (XSS) in webmin v.2.105 and earlier allows a remote attacker... CVE-2023-52046 4.8 MediumJanuary 25, 2024
• webmin There is a stored cross-site scripting (XSS) vulnerability in Webmin 2.002 and below via the... CVE-2023-43309 4.8 MediumSeptember 21, 2023
• webmin usermin Multiple stored cross-site scripting (XSS) vulnerabilities in Usermin 2.000 allow remote... CVE-2023-41157 5.4 MediumSeptember 16, 2023
• webmin A stored cross-site scripting (XSS) vulnerability in the Usermin Configuration function of Webmin... CVE-2023-40986 5.4 MediumSeptember 15, 2023
• webmin An issue was discovered in Webmin 2.100. The File Manager functionality allows an attacker to... CVE-2023-40985 5.4 MediumSeptember 15, 2023
• webmin A reflected cross-site scripting (XSS) vulnerability in the File Manager function of Webmin v2... CVE-2023-40984 5.4 MediumSeptember 15, 2023
• webmin A reflected cross-site scripting (XSS) vulnerability in the File Manager function of Webmin v2... CVE-2023-40983 6.1 MediumSeptember 15, 2023
• webmin A stored cross-site scripting (XSS) vulnerability in Webmin v2.100 allows attackers to execute... CVE-2023-40982 5.4 MediumSeptember 15, 2023
• webmin usermin A Stored Cross-Site Scripting (XSS) vulnerability in the SSH configuration tab in Usermin 2.001... CVE-2023-41160 5.4 MediumSeptember 14, 2023
• webmin usermin A Stored Cross-Site Scripting (XSS) vulnerability while editing the autoreply file page in... CVE-2023-41159 5.4 MediumSeptember 14, 2023
• webmin usermin A Stored Cross-Site Scripting (XSS) vulnerability in the filter and forward mail tab in Usermin 2... CVE-2023-41156 5.4 MediumSeptember 14, 2023
• webmin usermin A Reflected Cross-site scripting (XSS) vulnerability in the file manager tab in Usermin 2.000... CVE-2023-41162 6.1 MediumSeptember 13, 2023
• webmin usermin A Stored Cross-Site Scripting (XSS) vulnerability in the MIME type programs tab in Usermin 2.000... CVE-2023-41158 5.4 MediumSeptember 13, 2023
• webmin usermin, webmin +1 more A Stored Cross-Site Scripting (XSS) vulnerability in the mail forwarding and replies tab in... CVE-2023-41155 5.4 MediumSeptember 13, 2023
• webmin usermin A Stored Cross-Site Scripting (XSS) vulnerability in the scheduled cron jobs tab in Usermin 2.000... CVE-2023-41154 5.4 MediumSeptember 13, 2023
• webmin usermin A Stored Cross-Site Scripting (XSS) vulnerability in the MIME type programs tab in Usermin 2.000... CVE-2023-41152 5.4 MediumSeptember 13, 2023
• webmin usermin Multiple stored cross-site scripting (XSS) vulnerabilities in Usermin 2.000 allow remote... CVE-2023-41161 5.4 MediumSeptember 7, 2023
• webmin A Reflected Cross-site scripting (XSS) vulnerability in the file manager tab in Usermin 2.000... CVE-2023-41163 6.1 MediumAugust 30, 2023
• webmin usermin A Stored Cross-Site Scripting (XSS) vulnerability in the SSH configuration tab in Usermin 2.001... CVE-2023-41153 5.4 MediumAugust 29, 2023
• webmin An issue was discovered in Webmin 2.021. A Stored Cross-Site Scripting (XSS) vulnerability was... CVE-2023-38311 5.4 MediumJuly 31, 2023
• webmin An issue was discovered in Webmin 2.021. A Stored Cross-Site Scripting (XSS) vulnerability was... CVE-2023-38310 5.4 MediumJuly 31, 2023
• webmin An issue was discovered in Webmin 2.021. A Reflected Cross-Site Scripting (XSS) vulnerability was... CVE-2023-38309 6.1 MediumJuly 31, 2023
• webmin An issue was discovered in Webmin 2.021. A Cross-Site Scripting (XSS) vulnerability was... CVE-2023-38308 6.1 MediumJuly 31, 2023
• webmin An issue was discovered in Webmin 2.021. A Stored Cross-Site Scripting (XSS) vulnerability was... CVE-2023-38307 5.4 MediumJuly 31, 2023
• webmin An issue was discovered in Webmin 2.021. A Cross-site Scripting (XSS) Bypass vulnerability was... CVE-2023-38306 6.1 MediumJuly 31, 2023
• webmin An issue was discovered in Webmin 2.021. The download functionality allows an attacker to exploit... CVE-2023-38305 6.1 MediumJuly 31, 2023
• webmin An issue was discovered in Webmin 2.021. A Stored Cross-Site Scripting (XSS) vulnerability was... CVE-2023-38304 5.4 MediumJuly 31, 2023
• webmin An issue was discovered in Webmin 2.021. One can exploit a stored Cross-Site Scripting (XSS)... CVE-2023-38303 5.4 MediumJuly 31, 2023
• webmin Webmin index.cgi cross site scripting CVE-2022-3844 3.5 LowNovember 2, 2022
• webmin usermin Usermin through 1.850 allows a remote authenticated user to execute OS commands via command... CVE-2022-35132 8.8 HighOctober 25, 2022
• webmin usermin, webmin +1 more The Read Mail module in Webmin 1.995 and Usermin through 1.850 allows XSS via a crafted HTML e... CVE-2022-36880 6.1 MediumJuly 27, 2022
• webmin software/apt-lib.pl in Webmin before 1.997 lacks HTML escaping for a UI command. CVE-2022-36446 Public exploit EPSS 95.9% 9.8 CriticalJuly 25, 2022
• Show olderLoading…