CVE-2026-49243
Webmin is a web-based system administration tool for Unix-like servers
- Risk score
- 67/100
- CVSS
- 9.6 v3.1
- Exploit chance (30 days)
- 0.3%
- Published
- 29 Sep 2026
Open in the live forecast Today's forecast
What to know
- What it is
- Webmin is a web-based system administration tool for Unix-like servers. Prior to version 2.650, Webmin users who click on a malicious link to their server are vulnerable to this XSS vulnerability that could be used to execute attacker-controlled commands. This issue has been patched in version 2.650.
- Affected
- See advisory
- Fix
- Upgrade the product to 2.650 or later.
- Exploitation
- No known exploitation
Why it is Amber
- CVSS 9.6 critical
- Remotely exploitable without logging in
References
Original description
Webmin is a web-based system administration tool for Unix-like servers. Prior to version 2.650, Webmin users who click on a malicious link to their server are vulnerable to this XSS vulnerability that could be used to execute attacker-controlled commands. This issue has been patched in version 2.650.
Last activity 29 Sep 2026. Patch Forecast updates every hour.