CVE-2026-49103

Published May 27th, 2026

View on NVD ↗

CVSS v3

N/A

CVSS v2

N/A

Affected

PROJECT

Description

Webmin before 2.640 does not safely construct a filename for saving of an attachment within the mailboxes component. This occurs in mailboxes/detachall.cgi.

webmin/webmin

Powerful and flexible web-based server management control panel

GitHub

5.94K