CVE-2026-56021

No fix known EPSS <1%CVSS 5.3

Webmin allows unauthenticated attackers to read the contents of any file ending in .conf within module directories, due to a bypassable regex pattern.

Published 2026-06-18 · CVE record · OSV

Products: webmin