PT-2026-50712 · Webmin · Webmin

Adem El Adeb · CVE-2026-56021 · Published 2026-06-18 · Updated 2026-06-24

Positive Technologies (AI Summary)

CVSS v4.0

6.9

Medium

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Webmin (affected versions not specified)

Description Unauthenticated attackers can read the contents of any file ending in .conf within module directories. This is caused by a bypassable regex pattern, which is a sequence of characters used to find or match specific patterns in text.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-185

CWE-777

Related Identifiers

CVE-2026-56021

Affected Products

Webmin

References · 10

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/56xxx/CVE-2026-56021.json · Exploit
• https://cve.org/CVERecord?id=CVE-2026-56021 · Security Note
• https://osv.dev/vulnerability/CVE-2026-56021 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-56021 · Security Note
• https://github.com/webmin/webmin/releases/tag/2.641 · Note
• https://t.me/cveNotify/170643 · Telegram Post
• https://t.me/CVEtracker/57264 · Telegram Post
• https://webmin.com/security/#webmin-prior-to-2641 · Note
• https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2026/va-26-169-02.json · Note
• https://t.me/cveNotify/174531 · Telegram Post