Security Advisory

CVE-2026-56020

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-06-18 16:12:05

Last updated 2026-06-22 12:33:00

Assigner cisa-cg

CVSS score 8.1

State PUBLISHED

Description

The Webmin HTTP server (miniserv.pl) allows unauthenticated attackers to impersonate any user with a configured SSL client certificate by sending a forged HTTP header. A remote attacker can spoof certificate DNs and authenticate as any user. Fixed in 2.641.

← Browse all CVEs View on cve.org ↗