CVE 8.5 HIGH

CVE-2025-67738_CVE-2025-67738

8.5 / 10
HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Description

squid/cachemgr.cgi in Webmin before 2.600 does not properly quote arguments. This is relevant if Webmin's Squid module and its Cache Manager feature are available, and an untrusted party is able to authenticate to Webmin and has certain Cache Manager permissions (the "cms" security option).

AI Analysis

Command injection vulnerability in Webmin's Squid module

Basic Information

ID CVE-2025-67738
Source mitre
Published Dec 11, 2025 at 06:34
Modified Dec 11, 2025 at 07:01

Affected Product

Vendor Webmin
Product Webmin
Version before 2.600
Affected Versions Webmin Webmin 0

CWE Classification

AI Assessment

AI Score 8.5 / 10
AI Severity High
Vendor Webmin
Product Webmin
Version before 2.600

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.