CVE-2026-123620

Usermin through 2.570 contains an OS command injection vulnerability in the Read Mail module that allows authenticated users to execute commands through unsanitized IMAP folder names. Attackers can create a folder containing shell metacharacters via an external IMAP client, then delete it in...

EUVD-2026-118296

Usermin through 2.570 contains an OS command injection vulnerability in the Read Mail module that allows authenticated users to execute commands through unsanitized IMAP folder names. Attackers can create a folder containing shell metacharacters via an external IMAP client, then delete it in...

CVE-2026-123620

Versions of Usermin up to and including 2.570 are vulnerable to an OS command injection vulnerability within the Read Mail module. The root cause is the processing of unsanitized IMAP folder names . An authenticated attacker can create a folder containing shell metacharacters using an external IM...

CVE-2026-123620: webmin usermin: Usermin through 2.570 contains an OS command injection vulnerability in the Read Mail module that allows authenticated…

Usermin through 2.570 contains an OS command injection vulnerability in the Read Mail module that allows authenticated users to execute commands through unsanitized IMAP folder names. Attackers can create a folder containing shell metacharacters via an external IMAP client, then delete it in...