Hoch 7.7Software
CVE-2026-126781
Webmin: Mehrere Schwachstellen
Open Source Webmin
Webmin through 2.670 contains a users file injection vulnerability in acl/cert_issue.cgi that allows authenticated Webmin users to inject lines by supplying unvalidated certificate DN fields containing newlines. Attackers can end a DN field with a backslash and newline to add a second root entry with a known password hash, gaining Webmin root access after miniserv restarts.
11. Nov 2026
Original bei CERT-Bund öffnen