File and Path Handling

Every one of the 4 is a mark on the map. Named now: 1 to 4, most at risk first.

1. An issue was discovered in Webmin 1.840 and 1.880 when the default Yes setting of "Can view any file as a log file" is enabled. As a result of weak default configuration settings,…CVE-2018-8712Webmin · 1.8% likely

   CWE-22

2. Usermin through 2.570 Path Traversal File Write via detachall.cgiCVE-2026-123621webmin · CVSS 8.8 · 1.0% likely

   CWE-22

3. Webmin before 2.640 does not safely construct a filename for saving of an attachment within the mailboxes component. This occurs in mailboxes/detachall.cgi.CVE-2026-49103Webmin · CVSS 9.4 · 0.4% likely

   CWE-24

4. The Read Mail module in Webmin 1.720 allows local users to read arbitrary files via a symlink attack on an unspecified file.CVE-2015-1377Webmin · 0.4% likely

   CWE-59

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.