https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T18:57:14.691035+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-11622 bdu:2024-11622 2026-10-03T18:57:14.694103+00:00 bdu:2024-11622 https://cve.radiocsirt.org/vuln/euvd-2026-207855 EUVD-2026-207855 2026-10-03T18:57:14.694134+00:00 EUVD-2026-207855 https://cve.radiocsirt.org/vuln/fkie_cve-2024-12828 fkie_cve-2024-12828 2026-10-03T18:57:14.694148+00:00

Webmin CGI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Webmin. Authentication is required to exploit this vulnerability.

The specific flaw exists within the handling of CGI requests. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-22346.

 https://cve.radiocsirt.org/vuln/ghsa-r6m7-83vq-qx32 GHSA-r6m7-83vq-qx32 2026-10-03T18:57:14.694179+00:00

Webmin CGI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Webmin. Authentication is required to exploit this vulnerability.

The specific flaw exists within the handling of CGI requests. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-22346.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3740 WID-SEC-W-2024-3740 — Webmin: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode 2026-10-03T18:57:14.694197+00:00

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Webmin ausnutzen, um beliebigen Programmcode mit Root-Rechten auszuführen.