Approved changes feed: RSS · Atom
cpe:2.3:a:webmin:webmin:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Webmin (6926d512-2a2b-58cc-b911-39912c60be84) |
|---|---|
| Product | Webmin (3224cdf7-4b87-5464-81af-0361faa7f4bb) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/webmin/webmin |
purl2cpe | 2026-06-01 10:16:23.588667 |
pkg:sourceforge/webadmin |
purl2cpe | 2026-06-01 10:16:23.588668 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-56022 |
vulnerable | 2026-07-29 01:00:28.743291 |
Webmin MFA bypass
MEDIUM (5.3)
Webmin accepts basic authentication without session cookies when an attacker provides the 'User-Agent: webmin' header, allowing bypass of additional MFA requirements. Fixed in 2.640.
Published: 2026-06-18T16:11:22.057Z
Updated: 2026-08-11T15:33:46.054Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-56021 |
vulnerable | 2026-07-29 01:00:28.743060 |
Webmin information disclosure via regex pattern
MEDIUM (5.3)
Webmin allows unauthenticated attackers to read the contents of any file ending in .conf within module directories, due to a bypassable regex pattern.
Published: 2026-06-18T16:11:46.310Z
Updated: 2026-06-24T19:54:23.848Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-56020 |
vulnerable | 2026-07-29 01:00:28.742767 |
Webmin HTTP header authentication bypass
HIGH (8.1)
The Webmin HTTP server (miniserv.pl) allows unauthenticated attackers to impersonate any user with a configured SSL client certificate by sending a forged HTTP header. A remote attacker can spoof certificate DNs and authenticate as any user. Fixed in 2.202.
Published: 2026-06-18T16:12:05.368Z
Updated: 2026-08-11T15:33:27.670Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-42210 |
vulnerable | 2026-07-29 00:49:31.756075 |
Webmin 2FA requirement bypass
Webmin is a web-based system administration tool for Unix-like servers. Prior to version 2.640, for Webmin accounts that require a second authentication factor (typically TOTP), an attacker with knowledge of the username and password can bypass the 2FA requirement by using Basic authentication. Webmin is a web-based system administration tool for Unix-like servers. As a workaround, apply the patch from commit da18a16c84ae5c0b78cad79609cb0efb174000ec manually.
Published: 2026-07-20T17:03:09.650Z
Updated: 2026-07-20T17:41:48.414Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-49103 |
vulnerable | 2026-06-08 08:05:12.403594 |
Details available
Webmin before 2.640 does not safely construct a filename for saving of an attachment within the mailboxes component. This occurs in mailboxes/detachall.cgi.
Published: 2026-05-27T14:37:18.786Z
Updated: 2026-05-27T16:14:12.073Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-49102 |
vulnerable | 2026-06-08 08:05:12.403211 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-22678 |
vulnerable | 2026-06-08 07:51:13.572322 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-67738 |
vulnerable | 2026-06-08 07:41:20.392336 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-45692 |
vulnerable | 2026-06-08 06:48:08.915079 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-36453 |
vulnerable | 2026-06-08 06:39:45.016947 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-36452 |
vulnerable | 2026-06-08 06:39:45.016490 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-36451 |
vulnerable | 2026-06-08 06:39:45.016001 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-36450 |
vulnerable | 2026-06-08 06:39:45.012097 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-12828 |
vulnerable | 2026-06-08 06:25:36.171795 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-52046 |
vulnerable | 2026-06-08 06:17:54.180790 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-43309 |
vulnerable | 2026-06-08 06:11:11.116534 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-36446 |
vulnerable | 2026-06-08 05:46:07.433955 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-30708 |
vulnerable | 2026-06-08 05:43:39.644398 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-0829 |
vulnerable | 2026-06-08 05:39:11.269991 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-0824 |
vulnerable | 2026-06-08 05:39:11.262047 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-8821 |
vulnerable | 2026-06-08 05:27:19.728172 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-8820 |
vulnerable | 2026-06-08 05:27:19.727673 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-35606 |
vulnerable | 2026-06-08 05:25:01.447532 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-12670 |
vulnerable | 2026-06-08 05:17:58.724926 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-15642 |
vulnerable | 2026-06-08 05:12:57.734877 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-15641 |
vulnerable | 2026-06-08 05:12:57.734518 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-15107 |
vulnerable | 2026-06-08 05:12:56.671275 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-12840 |
vulnerable | 2026-06-08 05:12:40.568104 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-9313 |
vulnerable | 2026-06-08 05:10:09.603036 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-2106 |
vulnerable | 2026-06-08 05:09:23.593530 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-17089 |
vulnerable | 2026-06-08 05:09:07.875896 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-15646 |
vulnerable | 2026-06-08 05:08:59.351460 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-15645 |
vulnerable | 2026-06-08 05:08:59.351090 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-15644 |
vulnerable | 2026-06-08 05:08:59.350667 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-1377 |
vulnerable | 2026-06-08 05:06:25.492096 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-3924 |
vulnerable | 2026-06-08 05:05:43.373697 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-3886 |
vulnerable | 2026-06-08 05:05:43.155450 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-3885 |
vulnerable | 2026-06-08 05:05:43.150665 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-0339 |
vulnerable | 2026-06-08 05:05:12.616292 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-1937 |
vulnerable | 2026-06-08 04:58:03.100330 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-4568 |
vulnerable | 2026-06-08 04:51:48.962711 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-5066 |
vulnerable | 2026-06-08 04:49:57.788937 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-3156 |
vulnerable | 2026-06-08 04:49:53.352794 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-4542 |
vulnerable | 2026-06-08 04:49:18.232540 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-3392 |
vulnerable | 2026-06-08 04:49:09.094736 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-3274 |
vulnerable | 2026-06-08 04:49:08.781994 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-3912 |
vulnerable | 2026-06-08 04:48:42.517303 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2002-2201 |
vulnerable | 2026-06-08 04:47:19.376210 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.