CVE-2026-126780

high

Description

Webmin through 2.670 contains a privilege escalation vulnerability in acl/save_group.cgi that allows delegated administrators to grant unauthorized modules by submitting arbitrary module lists in the mod parameter. Attackers with Webmin Users module access can create or edit groups holding modules like Command Shell and assign themselves membership to execute commands as root.

References

https://www.vulncheck.com/advisories/webmin-through-2.670-privilege-escalation-via-acl-save-group-cgi

https://github.com/webmin/webmin/commit/c861e308f4ee4cff1795ccc7621fc75623e1bb90

https://github.com/webmin/webmin/commit/be54ba38c3b86a3647a62327e1de81d5d0db098a

https://github.com/webmin/webmin/blob/2.670/acl/save_group.cgi#L83

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-123774

Details

Source: Mitre, NVD

Published: 2026-11-11

Updated: 2026-11-12

Risk Information

CVSS v2

Base Score: 8.3

Vector: CVSS2#AV:N/AC:L/Au:M/C:C/I:C/A:C

Severity: High

CVSS v3

Base Score: 7.2

Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Severity: High

CVSS v4

Base Score: 8.6

Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Severity: High

EPSS

EPSS: 0.00589