← Database

CVE-2026-56021

MEDIUM CVSS: 5.3 Published: 2026-06-18 Modified: 2026-08-11

Description

Webmin allows unauthenticated attackers to read the contents of any file ending in .conf within module directories, due to a bypassable regex pattern.

Affected Platforms

Webmin Webmin

Weakness Type

CWE-185, CWE-777

References