Webmin Webmin

Name: Webmin Webmin
Brand: Webmin

productRU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

2critical5high12medium0low

updated 2026-10-28

vulnerabilities (34)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2019-15107US	critical9.8OT critical	99.7% (100th)	KEV	no fix	2019-08-16	≤ 1.930
CVE-2022-0824US	high8.8OT high	97.0% (100th)	Exploit	no fix	2022-03-02	≤ 1.990
CVE-2022-36446US	critical9.8	95.9% (100th)	Exploit	no fix	2022-07-25	≤ 1.997
CVE-2024-12828US	high8.8	33.3% (98th)	Exploit	no fix	2024-12-30	2 versions
CVE-2019-9624US	high7.8	23.7% (98th)	Exploit	no fix	2019-03-07	≤ 1.900
CVE-2024-2169US	—	5.40% (93rd)	Exploit	no fix	2024-03-19	—
CVE-2017-2106US	medium6.1	1.74% (78th)	—	no fix	2017-04-28	≤ versions prior to 1.830
CVE-2022-0829US	high8.1OT elevated	1.29% (70th)	—	no fix	2022-03-02	≤ 1.990
CVE-2023-38303US	medium5.4	0.80% (56th)	—	no fix	2023-07-31	≤ 2.021
CVE-2023-38309US	medium6.1	0.65% (51st)	—	no fix	2023-07-31	≤ 2.021
CVE-2023-38308US	medium6.1	0.65% (51st)	—	no fix	2023-07-31	≤ 2.021
CVE-2024-45692US	high7.5	0.62% (50th)	—	no fix	2024-09-04	≤ 2.202
CVE-2023-38306US	medium6.1	0.60% (48th)	—	no fix	2023-07-31	≤ 2.021
CVE-2023-38305US	medium6.1	0.60% (48th)	—	no fix	2023-07-31	≤ 2.021
CVE-2024-36451US	—	0.57% (47th)	—	no fix	2024-07-10	2 versions
CVE-2026-56022US	—	0.56% (46th)	—	2.640	2026-06-18	3 versions
CVE-2026-42210US	—	0.52% (44th)	—	no fix	2026-07-20	≤ < 2.640
CVE-2023-38311US	medium5.4	0.51% (44th)	—	no fix	2023-07-31	≤ 2.021
CVE-2023-38310US	medium5.4	0.51% (44th)	—	no fix	2023-07-31	≤ 2.021
CVE-2026-56020US	—	0.50% (42nd)	—	2.202	2026-06-18	3 versions
CVE-2026-56021US	—	0.48% (41st)	—	no fix	2026-06-18	2 versions
CVE-2023-38304US	medium5.4	0.47% (41st)	—	no fix	2023-07-31	≤ 2.021
CVE-2023-38307US	medium5.4	0.47% (40th)	—	no fix	2023-07-31	≤ 2.021
CVE-2025-61541US	—	0.46% (40th)	—	no fix	2025-10-16	≤ 2.510
CVE-2023-43309US	medium4.8	0.46% (39th)	—	no fix	2023-09-21	≤ 2.002
CVE-2024-36453US	—	0.40% (34th)	—	no fix	2024-07-10	2 versions
CVE-2026-49103US	—	0.40% (34th)	—	2.640	2026-05-27	0 → 2.640
CVE-2025-67738US	—	0.36% (29th)	—	2.600	2025-12-11	2 versions
CVE-2024-36450US	medium5.4	0.30% (23rd)	—	no fix	2024-07-10	2 versions
CVE-2026-22678US	—	0.22% (13th)	—	2.641	2026-05-21	2 versions
CVE-2026-49102US	—	0.22% (12th)	—	2.640	2026-05-27	0 → 2.640
CVE-2024-36452US	—	0.18% (7th)	—	no fix	2024-07-10	2 versions
CVE-2025-2774US	—	—	—	no fix	2025-05-05	≤ 2.302

showing 33 of 34

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')15 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')3 CVEs
CWE-284Improper Access Control2 CVEs
CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')2 CVEs
CWE-863Incorrect Authorization2 CVEs
CWE-116Improper Encoding or Escaping of Output1 CVEs
CWE-185Incorrect Regular Expression1 CVEs
CWE-24Path Traversal: '../filedir'1 CVEs

sources (3)

Which sources assert this record, and when.

RUBDU (FSTEC Data Security Threats Database)26 CVEs
EUEU Vulnerability Database (ENISA)14 CVEs
USCISA CSAF IT advisories3 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan