{"affected":[{"defaultStatus":"unaffected","ecosystem":"github","packageName":"webmin/webmin","product":"webmin","source":"CNA: VulnCheck","vendor":"webmin","versions":[{"lessThanOrEqual":"2.670","status":"affected","version":"0","versionType":"custom"}]}],"cveId":"CVE-2026-126780","cwes":["CWE-269"],"description":"Webmin through 2.670 contains a privilege escalation vulnerability in acl/save_group.cgi that allows delegated administrators to grant unauthorized modules by submitting arbitrary module lists in the mod parameter. Attackers with Webmin Users module access can create or edit groups holding modules like Command Shell and assign themselves membership to execute commands as root.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":8.6,"severity":"high","source":"CNA: VulnCheck","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","version":"4.0"},{"score":7.2,"severity":"high","source":"CNA: VulnCheck","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","version":"3.1"}],"modifiedAt":1794422470880,"publishedAt":1794422470880,"references":[{"source":"CNA: VulnCheck","tags":["patch"],"url":"https://github.com/webmin/webmin/commit/c861e308f4ee4cff1795ccc7621fc75623e1bb90"},{"source":"CNA: VulnCheck","tags":["patch"],"url":"https://github.com/webmin/webmin/commit/be54ba38c3b86a3647a62327e1de81d5d0db098a"},{"source":"CNA: VulnCheck","tags":["technical-description"],"url":"https://github.com/webmin/webmin/blob/2.670/acl/save_group.cgi#L83"},{"source":"CNA: VulnCheck","tags":["third-party-advisory"],"url":"https://www.vulncheck.com/advisories/webmin-through-2.670-privilege-escalation-via-acl-save-group-cgi"}],"remediation":[{"kind":"fix","source":"CNA: VulnCheck","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://github.com/webmin/webmin/commit/c861e308f4ee4cff1795ccc7621fc75623e1bb90"},{"kind":"fix","source":"CNA: VulnCheck","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://github.com/webmin/webmin/commit/be54ba38c3b86a3647a62327e1de81d5d0db098a"}],"revision":"01fc2cff13fe5b23380fc30b86bdb1ca5cfbebaea0b4cf575fe4ede1dca24e0d","sources":[{"modifiedAt":1794422470880,"name":"CNA: VulnCheck","retrievedAt":1794424139686,"url":"https://www.cve.org/CVERecord?id=CVE-2026-126780"}],"ssvc":null,"status":"published","title":"Webmin through 2.670 Privilege Escalation via acl/save_group.cgi","updatedAt":1794424139686}