CVE-2026-56022

Webmin accepts basic authentication without session cookies when an attacker provides the 'User-Agent: webmin' header, allowing bypass of additional MFA requirements. Fixed in 2.640...

PT-2022-12501

Name of the Vulnerable Software and Affected Versions Totolink A3100R version 5.9c.4577 Description The issue allows multiple pages to be read without authentication using tools like curl or Burp Suite. Furthermore, admin configurations can be set without the need for cookies. Recommendations For...