Vulnerability DatabaseCVE-2026-126781
Mend.io Vulnerability Database
The largest open source vulnerability database
What is a Vulnerability ID?
New vulnerability? Tell us about it!
CVE-2026-126781
Published:November 11, 2026
Updated:November 13, 2026
Webmin through 2.670 contains a users file injection vulnerability in acl/cert_issue.cgi that allows authenticated Webmin users to inject lines by supplying unvalidated certificate DN fields containing newlines. Attackers can end a DN field with a backslash and newline to add a second root entry with a known password hash, gaining Webmin root access after miniserv restarts.
Related Resources (7)
https://github.com/webmin/webmin
https://www.vulncheck.com/advisories/webmin-through-2.670-users-file-injection-via-acl-cert-issue-cgi
https://github.com/webmin/webmin/commit/8fb194e5fbc30a6664545d48940d03759ace9bf2
https://nvd.nist.gov/vuln/detail/CVE-2026-126781
https://github.com/webmin/webmin/blob/2.670/acl/cert_issue.cgi#L22-L52
https://github.com/webmin/webmin/commit/0c449e341746d8c445c8c7db223eac1f41755943
https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/126xxx/CVE-2026-126781.json
Do you need more information?
Contact Us
CVSS v4
Base Score:
7.7
Attack Vector
NETWORK
Attack Complexity
LOW
Attack Requirements
PRESENT
Privileges Required
LOW
User Interaction
NONE
Vulnerable System Confidentiality
HIGH
Vulnerable System Integrity
HIGH
Vulnerable System Availability
HIGH
Subsequent System Confidentiality
NONE
Subsequent System Integrity
NONE
Subsequent System Availability
NONE
CVSS v3
Base Score:
7.5
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH
Weakness Type (CWE)
Improper Neutralization of CRLF Sequences
CWE-93
EPSS
Base Score:
0.29