CVE-2026-123620: webmin usermin: Usermin through 2.570 contains an OS command injection vulnerability in the Read Mail module that allows authenticated…

Usermin through 2.570 contains an OS command injection vulnerability in the Read Mail module that allows authenticated users to execute commands through unsanitized IMAP folder names. Attackers can create a folder containing shell metacharacters via an external IMAP client, then delete it in...