CVE-2022-0824: webmin Improper Access Control

EPSS trend

Probability

96.98%

Chance of exploitation in the next 30 days

Percentile

100%

Versus all other CVEs

30-day change

0.00 pp

From 96.98% on 20-09-2026

20-09-202620-10-2026

EPSS score

96.98%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

6 found

referenceUnverified
Exploit Reference (huntr.dev)
Maturity: unknown
referenceUnverified
Exploit Reference (packetstormsecurity.com)
Maturity: unknown
referenceUnverified
Exploit Reference (notes.netbytesec.com)
Maturity: unknown

Show all 6 exploits

referenceUnverified
Exploit Reference (packetstormsecurity.com)
Maturity: unknown
exploit-databaselinuxUnverified
Webmin 1.984 - Remote Code Execution (Authenticated)
Maturity: poc
MetasploitremoteVerified
Webmin File Manager RCE
exploit/linux/http/webmin_file_manager_rce
Maturity: weaponized

References

5 links

huntr.dev/bounties/d0049a96-de90-4b1a-9111-94de1044f295ExploitIssue TrackingThird Party Advisory
github.com/webmin/webmin/commit/39ea464f0c40b325decd6a5bfb7833fa4a142e38PatchThird Party Advisory
packetstormsecurity.com/files/166240/Webmin-1.984-Remote-Code-Execution.htmlExploitThird Party AdvisoryVDB Entry
notes.netbytesec.com/2022/03/webmin-broken-access-control-to-post-auth-rce.htmlExploitThird Party Advisory
packetstormsecurity.com/files/169700/Webmin-1.984-File-Manager-Remote-Code-Execution.htmlExploitThird Party AdvisoryVDB Entry

Related vulnerabilities

CVE-2018-19191webminwebmin39.07%7y ago17-03-2019 21:27Webmin 1.890 has XSS via /config.cgi?webmin, the /shell/index.cgi history parameter, /shell/index.cgi?stripped=1, or the /webminlog/search.cgi uall or mall parameter.CVE-2018-8712webminwebmin1.79%8y ago14-03-2018 19:00An issue was discovered in Webmin 1.840 and 1.880 when the default Yes setting of "Can view any file as a log file" is enabled. As a result of weak default configuration settings, limited users have full access rights to the underlying Unix system files, allowing the user to read sensitive data from the local system (using Local File Include) such as the '/etc/shadow' file via a "GET /syslog/save_log.cgi?view=1&file=/etc/shadow" request.CVE-2025-61541webminwebmin0.46%1y ago16-10-2025 00:00Webmin 2.510 is vulnerable to a Host Header Injection in the password reset functionality (forgot_send.cgi). The reset link sent to users is constructed using the HTTP Host header via get_webmin_email_url(). An attacker can manipulate the Host header to inject a malicious domain into the reset email. If a victim follows the poisoned link, the attacker can intercept the reset token and gain full control of the target account.CVE-2025-67738webminwebmin0.36%10mo ago11-12-2025 06:34squid/cachemgr.cgi in Webmin before 2.600 does not properly quote arguments. This is relevant if Webmin's Squid module and its Cache Manager feature are available, and an untrusted party is able to authenticate to Webmin and has certain Cache Manager permissions (the "cms" security option).CVE-2020-35606webminwebmin28.05%5y ago21-12-2020 19:19Arbitrary command execution can occur in Webmin through 1.962. Any user authorized for the Package Updates module can execute arbitrary commands with root privileges via vectors involving %0A and %0C. NOTE: this issue exists because of an incomplete fix for CVE-2019-12840.CVE-2008-0720webminusermin+11.22%18y ago12-02-2008 01:00Cross-site scripting (XSS) vulnerability in Webmin 1.370 and 1.390 and Usermin 1.300 and 1.320 allows remote attackers to inject arbitrary web script or HTML via the search parameter to webmin_search.cgi (aka the search section), and possibly other components accessed through a "search box" or "open file box." NOTE: some of these details are obtained from third party information.

All vulnerabilities inwebmin webmin/webmin

CVE-2022-0824: webmin Improper Access Control

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References