Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Количество 4

Количество 4

ubuntu логотип

CVE-2026-56020

около 1 месяца назад

The Webmin HTTP server (miniserv.pl) allows unauthenticated attackers to impersonate any user with a configured SSL client certificate by sending a forged HTTP header. A remote attacker can spoof certificate DNs and authenticate as any user. Fixed in 2.641.

CVSS3: 8.1
EPSS: Низкий
nvd логотип

CVE-2026-56020

около 1 месяца назад

The Webmin HTTP server (miniserv.pl) allows unauthenticated attackers to impersonate any user with a configured SSL client certificate by sending a forged HTTP header. A remote attacker can spoof certificate DNs and authenticate as any user. Fixed in 2.641.

CVSS3: 8.1
EPSS: Низкий
debian логотип

CVE-2026-56020

около 1 месяца назад

The Webmin HTTP server (miniserv.pl) allows unauthenticated attackers ...

CVSS3: 8.1
EPSS: Низкий
github логотип

GHSA-23xj-gfh3-wf2h

около 1 месяца назад

The Webmin HTTP server (miniserv.pl) allows unauthenticated attackers to impersonate any user with a configured SSL client certificate by sending a forged HTTP header. A remote attacker can spoof certificate DNs and authenticate as any user. Fixed in 2.641.

CVSS3: 8.1
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2026-56020

The Webmin HTTP server (miniserv.pl) allows unauthenticated attackers to impersonate any user with a configured SSL client certificate by sending a forged HTTP header. A remote attacker can spoof certificate DNs and authenticate as any user. Fixed in 2.641.

CVSS3: 8.1
0%
Низкий
около 1 месяца назад
nvd логотип
CVE-2026-56020

The Webmin HTTP server (miniserv.pl) allows unauthenticated attackers to impersonate any user with a configured SSL client certificate by sending a forged HTTP header. A remote attacker can spoof certificate DNs and authenticate as any user. Fixed in 2.641.

CVSS3: 8.1
0%
Низкий
около 1 месяца назад
debian логотип
CVE-2026-56020

The Webmin HTTP server (miniserv.pl) allows unauthenticated attackers ...

CVSS3: 8.1
0%
Низкий
около 1 месяца назад
github логотип
GHSA-23xj-gfh3-wf2h

The Webmin HTTP server (miniserv.pl) allows unauthenticated attackers to impersonate any user with a configured SSL client certificate by sending a forged HTTP header. A remote attacker can spoof certificate DNs and authenticate as any user. Fixed in 2.641.

CVSS3: 8.1
0%
Низкий
около 1 месяца назад

Уязвимостей на страницу