Beveiligingsadvies

CVE-2026-56020

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-06-18 16:12:05

Laatst bijgewerkt 2026-08-11 15:33:27

Toegewezen door cisa-cg

CVSS-score 9.2

Status PUBLISHED

Beschrijving

The Webmin HTTP server (miniserv.pl) allows unauthenticated attackers to impersonate any user with a configured SSL client certificate by sending a forged HTTP header. A remote attacker can spoof certificate DNs and authenticate as any user. Fixed in 2.202.

← Alle CVE's bekijken Bekijk op cve.org ↗