What’s Vulnerable › Products

Webmin vulnerabilities

102 known vulnerabilities, 1 confirmed exploited in the wild (CISA KEV), 11 published in the last 12 months.

Check whether your Webmin version is affected

Exploited Webmin vulnerabilities

• CVE-2019-15107 — Webmin Command Injection Vulnerability

Latest Webmin vulnerabilities

• CVE-2026-49243 — Webmin: Reflected XSS in the Configuration module (CVSS 9.6)
• CVE-2026-42210 — Webmin 2FA requirement bypass (CVSS 5.3)
• CVE-2026-56022 — Webmin MFA bypass (CVSS 5.3)
• CVE-2026-56021 — Webmin information disclosure via regex pattern (CVSS 5.3)
• CVE-2026-56020 — Webmin HTTP header authentication bypass (CVSS 8.1)
• CVE-2026-49103 — (CVSS 9.4)
• CVE-2026-49102 — (CVSS 6.1)
• CVE-2026-22678 — Webmin < 2.641 Stored XSS via System and Server Status (CVSS 5.4)
• CVE-2025-67738 — (CVSS 8.5)
• CVE-2025-61541 — (CVSS 7.1)
• CVE-2024-12828 — Webmin CGI Command Injection Remote Code Execution Vulnerability (CVSS 8.8)
• CVE-2024-45692 — (CVSS 7.5)
• CVE-2024-36453 — (CVSS 6.1)
• CVE-2024-36452 — (CVSS 3.1)
• CVE-2024-36451 — (CVSS 8.8)
• CVE-2024-36450 — (CVSS 5.4)
• CVE-2023-52046 — (CVSS 4.8)
• CVE-2023-43309 — (CVSS 4.8)
• CVE-2023-40983 — (CVSS 6.1)
• CVE-2023-40982 — (CVSS 5.4)
• CVE-2023-40986 — (CVSS 5.4)
• CVE-2023-40985 — (CVSS 5.4)
• CVE-2023-40984 — (CVSS 5.4)
• CVE-2023-41155 — (CVSS 5.4)
• CVE-2023-41163 — (CVSS 6.1)