PT-2026-145432

Webmin through 2.670 contains a privilege escalation vulnerability in acl/save group.cgi that allows delegated administrators to grant unauthorized modules by submitting arbitrary module lists in the mod parameter. Attackers with Webmin Users module access can create or edit groups holding module...