CVE-2026-102337

Webmin is a web-based system administration tool for Unix-like servers. Prior to 2.652, untrusted users with access to the File Manager or Upload and Download modules can direct Webmin's server-side URL download functionality to non-public network addresses because download destinations are not...

CVE-2026-102337

Webmin, a web-based system administration tool for Unix-like servers, is vulnerable to Server-Side Request Forgery (SSRF) in versions prior to 2.652 . An attacker with access to the File Manager or Upload and Download modules can exploit the server-side URL download functionality because download...

PT-2026-137225

Webmin is a web-based system administration tool for Unix-like servers. Prior to 2.652, untrusted users with access to the File Manager or Upload and Download modules can direct Webmin's server-side URL download functionality to non-public network addresses because download destinations are not...