CVE-2025-67738

Published December 11th, 2025

View on NVD ↗

CVSS v3

8.5

HIGH

CVSS v2

N/A

Affected

PROJECT

Description

squid/cachemgr.cgi in Webmin before 2.600 does not properly quote arguments. This is relevant if Webmin's Squid module and its Cache Manager feature are available, and an untrusted party is able to authenticate to Webmin and has certain Cache Manager permissions (the "cms" security option).

webmin/webmin

Powerful and flexible web-based server management control panel

GitHub

5.94K