All vulnerabilities

Servers and applications

CVE-2024-12828

Webmin CGI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Webmin. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of CGI requests. The issue results from the lack of proper validation of a user-supplied string before using it to execute…

Severity
High 8.8
Published
30 Dec 2024
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
WebminServers and applications · cpe:a:webmin:webmin
  • Version 2.104

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2024-12828
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2024-12828