CVE-2024-44762

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• Usermin 2.100 - Username Enumeration2025-04-17 · webapps · multiple
• Webmin Usermin 2.100 - Username Enumeration2025-04-03 · webapps · perl

Impact

A discrepancy in error messages for invalid login attempts in Webmin Usermin v2.100 allows attackers to enumerate valid user accounts.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• https://senscybersecurity.nl/cve-2024-44762-explained/