https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-11T11:46:01.585998+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-102337 fkie_cve-2026-102337 2026-11-11T11:46:01.591995+00:00

Webmin is a web-based system administration tool for Unix-like servers. Prior to 2.652, untrusted users with access to the File Manager or Upload and Download modules can direct Webmin's server-side URL download functionality to non-public network addresses because download destinations are not restricted by resolved IP address. This allows requests to unauthenticated intranet services or cloud-provider instance metadata endpoints that are inaccessible from the user's own system. This issue is fixed in 2.652.

 https://db.gcve.eu/vuln/wid-sec-w-2026-4355 WID-SEC-W-2026-4355 — Webmin: Schwachstelle ermöglicht Offenlegung von Informationen 2026-11-11T11:46:01.592063+00:00

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Webmin ausnutzen, um Informationen offenzulegen.