https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T17:39:56.863125+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certa-2006-avi-337 certa-2006-avi-337 — Une vulnérabilité découverte dans les applications Webmin et Usermin permet à un utilisateur mal intentionné de porter… 2026-10-03T17:39:56.945606+00:00 certa-2006-avi-337 https://cve.radiocsirt.org/vuln/euvd-2026-141690 EUVD-2026-141690 2026-10-03T17:39:56.945651+00:00 EUVD-2026-141690 https://cve.radiocsirt.org/vuln/fkie_cve-2006-3392 fkie_cve-2006-3392 2026-10-03T17:39:56.945667+00:00

Webmin before 1.290 and Usermin before 1.220 calls the simplify_path function before decoding HTML, which allows remote attackers to read arbitrary files, as demonstrated using "..%01" sequences, which bypass the removal of "../" sequences before bytes such as "%01" are removed from the filename. NOTE: This is a different issue than CVE-2006-3274.

 https://cve.radiocsirt.org/vuln/ghsa-w4wx-r2h6-p94q GHSA-w4wx-r2h6-p94q 2026-10-03T17:39:56.945700+00:00

Webmin before 1.290 and Usermin before 1.220 calls the simplify_path function before decoding HTML, which allows remote attackers to read arbitrary files, as demonstrated using "..%01" sequences, which bypass the removal of "../" sequences before bytes such as "%01" are removed from the filename. NOTE: This is a different issue than CVE-2006-3274.

 https://cve.radiocsirt.org/vuln/gsd-2006-3392 gsd-2006-3392 2026-10-03T17:39:56.945719+00:00 gsd-2006-3392