CVE-2026-56021

Medium

Webmin allows unauthenticated attackers to read the contents of any file ending in .conf within module directories, due to a bypassable…

cisa-cg·CWE-185·Published 2026-06-18

CVSS

5.3

EPSS

—

KEV

Exploits

cve.orgen

150 chars

Webmin allows unauthenticated attackers to read the contents of any file ending in .conf within module directories, due to a bypassable regex pattern.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	cve.org	5.3	—	—	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
3.1	Primary	cve.org	5.3	—	—	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N