medium5.3
CVE-2026-56021
Webmin allows unauthenticated attackers to read the contents of any file ending in .conf within module directories, due to a bypassable regex pattern.
Impact
Webmin allows unauthenticated attackers to read the contents of any file ending in .conf within module directories, due to a bypassable regex pattern.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Webmin | Webmin | before 1.290 |