What’s Vulnerable › Vulnerabilities

CVE-2020-35769

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-12-29 · updated 2026-06-17

Description

miniserv.pl in Webmin 1.962 on Windows mishandles special characters in query arguments to the CGI program.

Affected products

• Webmin: 1.962

References

• https://github.com/webmin/webmin/commit/1163f3a7f418f249af64890f4636575e687e9de7#diff-9b33fd8f5603d4f0d1428689bc36f24af4770608a22c0d92b7a8bcc522450dc6
• https://vigilance.fr/vulnerability/Webmin-code-execution-via-miniserv-pl-handle-request-34220
• https://github.com/webmin/webmin/commit/1163f3a7f418f249af64890f4636575e687e9de7#diff-9b33fd8f5603d4f0d1428689bc36f24af4770608a22c0d92b7a8bcc522450dc6
• https://vigilance.fr/vulnerability/Webmin-code-execution-via-miniserv-pl-handle-request-34220

Get alerted when CVE-2020-35769 or the next vulnerability affects your stack