EUVD-2026-123774

Webmin through 2.670 contains a privilege escalation vulnerability in acl/savegroup.cgi that allows delegated administrators to grant unauthorized modules by submitting arbitrary module lists in the mod parameter. Attackers with Webmin Users module access can create or edit groups holding modules...

CVE-2026-126780

Webmin versions up to and including 2.670 are susceptible to a privilege escalation vulnerability within the acl/save_group.cgi component. The root cause is the improper handling of the mod parameter, which allows delegated administrators to submit arbitrary module lists. An attacker with access ...