CVE-2026-560216.9MediumCWE-185

CVE-2026-56021: Webmin information disclosure via regex pattern

Webmin

Vendor fix available · Affected: Webmin · Exploitation: not established

ExploitationNot established

Not in CISA KEV as of catalogue 2026.11.13 (13 Nov)

In CISA KEV: not seen
Exploited (reported): not seen
Scanning observed: not seen
Proof of concept public: not seen
Not establishedNothing in the sources we check

0.5%probability of exploitation in the next 30 days

41st percentile

050100

Higher than 41% of scored CVEs

6.9MediumCVSS 3.1

LowMediumHighCrit.

DescriptionNVD

Webmin allows unauthenticated attackers to read the contents of any file ending in .conf within module directories, due to a bypassable regex pattern.

On the Atlas

Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.

Open the Atlas

Exploitation: Unlikely (under 1%). EPSS under 1%, or no score yet.
CISA KEV: Not listed
Public check: No public nuclei template
Weakness: Regular Expression without Anchors · Input Validation and Logic
Vendor: Webmin
Published: June 2026
Band: Unlikely (under 1%), June 2026

Coverage1 article · 1 outlet

First in our coverage: SecurityOnline, 24 Jun.

24 Jun 02:01
Critical Webmin flaws expose authentication bypass and data leaks
SecurityOnline · first in our coverage · mentions it in passing

New articles also arrive in the RSS feed.