Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2026-56021

Webmin information disclosure via regex pattern

Description

Webmin allows unauthenticated attackers to read the contents of any file ending in .conf within module directories, due to a bypassable regex pattern.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Webmin Webmin

Default version status: unknown

  • *affected

References