CVE-2026-56021

Published June 18th, 2026

View on NVD ↗

CVSS v3

5.3

MEDIUM

CVSS v2

N/A

Affected

PROJECT

Description

Webmin allows unauthenticated attackers to read the contents of any file ending in .conf within module directories, due to a bypassable regex pattern.

webmin/webmin

Powerful and flexible web-based server management control panel

GitHub

5.94K