CVE-2026-126781

HIGH 7.5

Webmin through 2.670 Users File Injection via acl/cert_issue.cgi

CVSS Score

7.5

EPSS Score

0.0%

EPSS Percentile

0th

Webmin through 2.670 contains a users file injection vulnerability in acl/cert_issue.cgi that allows authenticated Webmin users to inject lines by supplying unvalidated certificate DN fields containing newlines. Attackers can end a DN field with a backslash and newline to add a second root entry with a known password hash, gaining Webmin root access after miniserv restarts.

CWE	CWE-93
Vendor	webmin
Product	webmin
Published	Nov 11, 2026

Stay Ahead of the Next One

Get instant alerts for webmin webmin

Be the first to know when new high vulnerabilities affecting webmin webmin are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

High

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Affected Versions

webmin / webmin

0 ≤ 2.670

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/webmin/webmin/commit/0c449e341746d8c445c8c7db223eac1f41755943 github.com: https://github.com/webmin/webmin/commit/8fb194e5fbc30a6664545d48940d03759ace9bf2 github.com: https://github.com/webmin/webmin/blob/2.670/acl/cert_issue.cgi#L22-L52 vulncheck.com: https://www.vulncheck.com/advisories/webmin-through-2.670-users-file-injection-via-acl-cert-issue-cgi

Credits

Zachariah Mithani (AploSec)