Security Advisory

CVE-2026-56022

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-06-18 16:11:22

Last updated 2026-06-24 19:55:03

Assigner cisa-cg

CVSS score 5.3

State PUBLISHED

Description

Webmin accepts basic authentication without session cookies when an attacker provides the 'User-Agent: webmin' header, allowing bypass of additional MFA requirements. Fixed in 2.641.

← Browse all CVEs View on cve.org ↗