https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T09:19:38.430017+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-351151 EUVD-2026-351151 2026-10-04T09:19:38.485160+00:00 EUVD-2026-351151 https://cve.radiocsirt.org/vuln/fkie_cve-2026-56022 fkie_cve-2026-56022 2026-10-04T09:19:38.485199+00:00

Webmin accepts basic authentication without session cookies when an attacker provides the 'User-Agent: webmin' header, allowing bypass of additional MFA requirements. Fixed in 2.640.

 https://cve.radiocsirt.org/vuln/ghsa-9848-6qgw-2748 GHSA-9848-6qgw-2748 2026-10-04T09:19:38.485232+00:00

Webmin accepts basic authentication without session cookies when an attacker provides the 'User-Agent: webmin' header, allowing bypass of additional MFA requirements. Fixed in 2.641.

 https://cve.radiocsirt.org/vuln/va-26-169-02 VA-26-169-02 — Webmin multiple vulnerabilities 2026-10-04T09:19:38.485249+00:00

The Webmin HTTP server (miniserv.pl) allows unauthenticated attackers to impersonate any user with a configured SSL client certificate by sending a forged HTTP header. A remote attacker can spoof certificate DNs and authenticate as any user. Fixed in 2.202. Webmin allows unauthenticated attackers to read the contents of any file ending in .conf within module directories, due to a bypassable regex pattern. Webmin accepts basic authentication without session cookies when an attacker provides the 'User-Agent: webmin' header, allowing bypass of additional MFA requirements. Fixed in 2.640.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2014 WID-SEC-W-2026-2014 — Webmin: Mehrere Schwachstellen 2026-10-04T09:19:38.485274+00:00

Ein Angreifer kann mehrere Schwachstellen in Webmin ausnutzen, um falsche Informationen darzustellen, um Informationen offenzulegen, und um Sicherheitsvorkehrungen zu umgehen.