Security Advisory
CVE-2026-49103
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Webmin before 2.640 does not safely construct a filename for saving of an attachment within the mailboxes component. This occurs in mailboxes/detachall.cgi.