CVE-2026-123621 | Webmin Usermin up to 2.570 Mailbox mailbox/detachall.cgi attachment path traversal

November 6, 2026 Yanac

A vulnerability was found in Webmin Usermin up to 2.570. It has been rated as critical. Affected by this issue is some unknown functionality of the file mailbox/detachall.cgi of the component Mailbox. Performing a manipulation of the argument attachment results in path traversal.

This vulnerability is cataloged as CVE-2026-123621. It is possible to initiate the attack remotely. There is no exploit available.VulDB Recent EntriesRead More