File Disclosure Vulnerability in Webmin by Vendor Min

CVE-2026-56021

What is CVE-2026-56021?

A vulnerability in Webmin allows unauthorized individuals to access and read the contents of any configuration file ending in .conf located within module directories. This issue arises due to a bypassable regex pattern, enabling attackers to leverage the weakness to obtain sensitive information without authentication. Users are advised to update to the latest version to mitigate potential risks.

References