CVE-2026-56022

Katalog CVE

CVSS 5.3 · Medium EPSS 0,56%

Kerentanan Use of Single-factor Authentication pada webmin. Skor CVSS 3.1 5.3 (Medium) menurut CNA.

Deskripsi (NVD)

Webmin accepts basic authentication without session cookies when an attacker provides the 'User-Agent: webmin' header, allowing bypass of additional MFA requirements. Fixed in 2.640.

Rincian

Terbit di NVD

18 Juni 2026

Terakhir diubah

11 Agustus 2026

Status NVD

Analyzed

CVSS 3.1

5.3 (Medium), sumber CNA
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-308: Use of Single-factor Authentication

EPSS (30 hari)

0,56% peluang dieksploitasi; lebih tinggi dari 44,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://webmin.com/security/#webmin-prior-to-2640 advisory vendor
• https://github.com/webmin/webmin/releases/tag/2.640 release notes
• https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2026/va-26-169-02.json vdb entry
• https://www.cve.org/CVERecord?id=CVE-2026-56022 vdb entry