CVE-2026-56021 Webmin information disclosure via regex pattern

What is CVE-2026-56021?

CVE-2026-56021 is a medium-severity vulnerability in Webmin Webmin, published on 18 Jun 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Webmin allows unauthenticated attackers to read the contents of any file ending in .conf within module directories, due to a bypassable regex pattern.

Weakness: CWE-777, CWE-185

Which versions are affected by CVE-2026-56021?

It affects 1 product.

Products include Webmin Webmin.

How do I fix CVE-2026-56021?

No fix has been published for CVE-2026-56021 yet. Limit exposure of the affected software until one is available.

Is CVE-2026-56021 being exploited?

There is no known exploitation of CVE-2026-56021 in the wild and no public exploit code.

Other vulnerabilities in Webmin Webmin

• CVE-2019-15107 Webmin Command Injection Exploited Critical 9.8
• CVE-2002-2201 Command injection in n/a Critical 10.0
• CVE-2001-1196 Path traversal in n/a Critical 10.0
• CVE-2024-12828 Webmin CGI Command Injection Remote Code Execution Vulnerability Critical 9.9
• CVE-2022-36446 Cross-site scripting in n/a Critical 9.8

All Webmin Webmin vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-xpvh-gv3p-w5qx.