Security Advisory

CVE-2026-56020

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-06-18 16:12:05

Last updated 2026-08-11 15:33:27

Assigner cisa-cg

CVSS score 9.2

State PUBLISHED

Description

The Webmin HTTP server (miniserv.pl) allows unauthenticated attackers to impersonate any user with a configured SSL client certificate by sending a forged HTTP header. A remote attacker can spoof certificate DNs and authenticate as any user. Fixed in 2.202.

← Browse all CVEs View on cve.org ↗