CVE-2026-56020

creationtimestamp| type| source ---|---|--- 2026-06-18 17:59:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3molfrsjyox23 2026-07-16 19:51:58+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3mqrz4walds2m...

CVE-2026-56020

The Webmin HTTP server miniserv.pl allows unauthenticated attackers to impersonate any user with a configured SSL client certificate by sending a forged HTTP header. A remote attacker can spoof certificate DNs and authenticate as any user. Fixed in 2.641...