CVE-2026-49243
Critical · CVSS 9.6- CVSS
- 9.6
- nvd
- EPSS
- 0.30%
- 21th pct
- KEV
- No
- Class
- oss containerizable
- CWE-79
Description
Webmin is a web-based system administration tool for Unix-like servers. Prior to version 2.650, Webmin users who click on a malicious link to their server are vulnerable to this XSS vulnerability that could be used to execute attacker-controlled commands. This issue has been patched in version 2.650.
References
Status: profiled · ingested 2026-10-09T18:00:43.000Z