Product by Open Source
Webmin
8 known vulnerabilities in Webmin (Open Source), 0 of them actively exploited (CISA KEV).
Key figures
8
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
3
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-49243 | Webmin: Reflected XSS in the Configuration module | 9.6 | |
| Critical | CVE-2026-56020 | Webmin HTTP header authentication bypass | 8.1 | |
| Critical | CVE-2026-49103 | Webmin: Path Traversal: '../filedir' | — | |
| Medium | CVE-2026-56022 | Webmin MFA bypass | 5.3 | |
| Medium | CVE-2026-102337 | Webmin: SSRF exploit in Upload and Download and File Manager modules | — | |
| Medium | CVE-2026-56021 | Webmin information disclosure via regex pattern | 5.3 | |
| Medium | CVE-2026-42210 | Webmin 2FA requirement bypass | — | |
| Medium | CVE-2026-49102 | Webmin: Cross-site Scripting | 6.1 |