EUVD-2026-120554

Webmin through 2.670 contains an OS command injection vulnerability in samba/saveeuser.cgi that allows authenticated Samba user maintainers to inject commands via unvalidated opts parameter. Attackers can embed shell metacharacters in account option flags passed by createuser and modifyuser to...

CVE-2026-125391

Webmin through 2.670 contains an OS command injection vulnerability in samba/saveeuser.cgi that allows authenticated Samba user maintainers to inject commands via unvalidated opts parameter. Attackers can embed shell metacharacters in account option flags passed by createuser and modifyuser to...

CVE-2026-125391: webmin: Webmin through 2.670 contains an OS command injection vulnerability in samba/save_euser.cgi that allows authenticated…

Webmin through 2.670 contains an OS command injection vulnerability in samba/saveeuser.cgi that allows authenticated Samba user maintainers to inject commands via unvalidated opts parameter. Attackers can embed shell metacharacters in account option flags passed by createuser and modifyuser to...

CVE-2026-125391

Webmin versions through 2.670 are affected by an OS command injection vulnerability located in samba/save_euser.cgi . The root cause is the lack of validation for the opts parameter. Authenticated Samba user maintainers can inject shell metacharacters into account option flags during create_user ...

CVE-2026-125391 Webmin through 2.670 OS Command Injection via Samba User Account Options

Webmin through 2.670 contains an OS command injection vulnerability in samba/saveeuser.cgi that allows authenticated Samba user maintainers to inject commands via unvalidated opts parameter. Attackers can embed shell metacharacters in account option flags passed by createuser and modifyuser to...