PT-2026-141214

Webmin through 2.670 contains an OS command injection vulnerability in samba/save euser.cgi that allows authenticated Samba user maintainers to inject commands via unvalidated opts parameter. Attackers can embed shell metacharacters in account option flags passed by create user and modify user to...