Skip to content
CVE PROGRAM SOURCE RECORD9.6 Critical

CVE-2026-49243

Webmin: Reflected XSS in the Configuration module

Description

Webmin is a web-based system administration tool for Unix-like servers. Prior to version 2.650, Webmin users who click on a malicious link to their server are vulnerable to this XSS vulnerability that could be used to execute attacker-controlled commands. This issue has been patched in version 2.650.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

webmin webmin

  • < 2.650affected

References