CVE-2026-56021

Katalog CVE

CVSS 5.3 · Medium EPSS 0,48%

Kerentanan Incorrect Regular Expression pada webmin. Skor CVSS 3.1 5.3 (Medium) menurut CNA.

Deskripsi (NVD)

Webmin allows unauthenticated attackers to read the contents of any file ending in .conf within module directories, due to a bypassable regex pattern.

Rincian

Terbit di NVD

18 Juni 2026

Terakhir diubah

11 Agustus 2026

Status NVD

Analyzed

CVSS 3.1

5.3 (Medium), sumber CNA
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-185: Incorrect Regular Expression
CWE-777: Regular Expression without Anchors

EPSS (30 hari)

0,48% peluang dieksploitasi; lebih tinggi dari 39,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://webmin.com/security/#webmin-prior-to-2641 advisory vendor
• https://github.com/webmin/webmin/releases/tag/2.641 product · release notes
• https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2026/va-26-169-02.json vdb entry
• https://www.cve.org/CVERecord?id=CVE-2026-56021 vdb entry