8.5
/ 10
HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Description
squid/cachemgr.cgi in Webmin before 2.600 does not properly quote arguments. This is relevant if Webmin's Squid module and its Cache Manager feature are available, and an untrusted party is able to authenticate to Webmin and has certain Cache Manager permissions (the "cms" security option).
AI Analysis
Command injection vulnerability in Webmin's Squid module
Basic Information
ID
CVE-2025-67738
Source
mitre
Published
Dec 11, 2025 at 06:34
Modified
Dec 11, 2025 at 07:01
Affected Product
Vendor
Webmin
Product
Webmin
Version
before 2.600
Affected Versions
Webmin Webmin 0
CWE Classification
AI Assessment
AI Score
8.5 / 10
AI Severity
High
Vendor
Webmin
Product
Webmin
Version
before 2.600