https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T10:28:17.467798+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-07880 bdu:2026-07880 2026-10-04T10:28:17.470667+00:00 bdu:2026-07880 https://cve.radiocsirt.org/vuln/euvd-2026-336554 EUVD-2026-336554 2026-10-04T10:28:17.470700+00:00 EUVD-2026-336554 https://cve.radiocsirt.org/vuln/fkie_cve-2026-22678 fkie_cve-2026-22678 2026-10-04T10:28:17.470714+00:00

Webmin before 2.641 contains a stored cross-site scripting vulnerability in the email template description field of the System and Server Status module that allows low-privileged authenticated attackers to execute arbitrary JavaScript in the browser context of administrators by injecting unsanitized input stored in save_tmpl.cgi and rendered unescaped in list_tmpls.cgi.

 https://cve.radiocsirt.org/vuln/ghsa-vxwv-pg73-pf78 GHSA-vxwv-pg73-pf78 2026-10-04T10:28:17.470742+00:00

Webmin before 2.641 contains a stored cross-site scripting vulnerability in the email template description field of the System and Server Status module that allows low-privileged authenticated attackers to execute arbitrary commands by injecting unsanitized input stored in save_tmpl.cgi and rendered unescaped in list_tmpls.cgi.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1648 WID-SEC-W-2026-1648 — Webmin: Schwachstelle ermöglicht Cross-Site Scripting 2026-10-04T10:28:17.470759+00:00

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Webmin ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.