PT-2026-102636

CVE-2026-49243

Published

2026-09-29

Updated

2026-10-09

Description by

CVSS 3.1

9.6

Critical

MetricsAV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Webmin versions prior to 2.650

Description Webmin is a web-based system administration tool for Unix-like servers. Users are susceptible to Cross-Site Scripting (XSS), a technique where malicious scripts are injected into trusted websites, which can be triggered when a user clicks a malicious link to their server. This flaw allows for the execution of attacker-controlled commands.

Recommendations Update to version 2.650.

Exploitability

Exploit

Fix

Impacts

Researchers

Emiliano Versini

Vendors

Affected products

Weakness enumeration

CWE-79: Improper Neutralization of Input During Web Page Generation (\'Cross-site Scripting\')

Related identifiers