CVE-2026-102337

Webmin, a web-based system administration tool for Unix-like servers, is vulnerable to Server-Side Request Forgery (SSRF) in versions prior to 2.652 . An attacker with access to the File Manager or Upload and Download modules can exploit the server-side URL download functionality because download...