CVE record · 1 source
CVE-2026-123620
CVSS 7.5Usermin through 2.570 contains an OS command injection vulnerability in the Read Mail module that allows authenticated users to execute commands…
- Vendor
- Webmin
- Product
- usermin
- CVSS v3.1
- 7.5 AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weakness
- CWE-78
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
Usermin through 2.570 contains an OS command injection vulnerability in the Read Mail module that allows authenticated users to execute commands…
Usermin through 2.570 contains an OS command injection vulnerability in the Read Mail module that allows authenticated users to execute commands through unsanitized IMAP folder names. Attackers can create a folder containing…