Webmin

United Kingdom Open Source www.webmin.com ↗
D
RISKY
14
Total CVEs
4
Crit / High
3
Medium
0%
Unpatched
21%
Patched
7.2
Avg CVSS
0
CISA KEV
// Data sourced from NVD · CISA KEV · RHSA · GHSA · Debian · OSV · EPSS · Exploit-DB How we collect data →
// INTEL UPGRADE
Full Company Dossier — Coming Soon
Executive profiles, financial exposure, M&A risk, breach history & supply-chain threat mapping — all in one place.
OSINT FINANCIALS EXEC PROFILES BREACH DB
▸ CVE Trend by Year
▸ Patch Coverage
Patched
21%
Unpatched
0%
Under Review
63%
Pending
16%
✓ 4 patched ✗ 0 unpatched ~ 12 under review ⏳ 3 pending score
▸ Intelligence by Audience
PoC Available
10 / 20 shown
CISA KEV (Exploited)
0
Shodan Dorks
ssl:"webmin" port:443
org:"Webmin" http.status:200
Top EPSS (Exploitation Probability)
CVE-2019-15107 99.71% exploitation probability
CVE-2022-36446 96.05% exploitation probability
CVE-2024-12828 33.47% exploitation probability
CVE-2022-30708 3.59% exploitation probability
CVE-2024-44762 2.57% exploitation probability
Quick Facts for Reporting
Total CVEs tracked
14
Critical severity
1
Actively exploited (CISA)
0
Unpatched ratio
0%
Avg CVSS score
7.2
Security grade
D (RISKY)
NVD Data Attribution
Source: NIST National Vulnerability Database (NVD) + GitHub Advisory Database.
Data aggregated by Valters IT Hub · valtersit.com
Last updated: 2026-07-08
Security Risk Score (for investors)
LOW
Vuln Volume
GOOD
Patch Responsiveness
LOW
CISA Exposure
⚠ Not financial advice. Past security incidents do not guarantee future stock performance.
▸ Security News Google News
Critical Webmin Stored XSS Vulnerability Lets Untrusted Users Exploit Root Accounts - Cyber Press
Cyber Press 2026-06-24
Apache Tomcat Vulnerability CVE-2024-56337 Exposes Servers to RCE Attacks - The Hacker News
The Hacker News 2024-12-24
20 Best Linux Admin Tools In 2026 - CyberSecurityNews
CyberSecurityNews 2026-01-12
▸ Recent CVEs showing 20 of 19
CVE IDSeverityPatchEPSSDate
CVE-2026-56021 PoC 5.3 MEDIUM PATCH UNDER REVIEW 0.48% 2026-06-18
CVE-2026-56022 PoC 5.3 MEDIUM PATCHED / FIX AVAILABLE 0.56% 2026-06-18
CVE-2026-56020 PoC 8.1 HIGH PATCHED / FIX AVAILABLE 0.50% 2026-06-18
CVE-2026-49102 PoC 6.1 MEDIUM PATCHED / FIX AVAILABLE 0.22% 2026-05-27
CVE-2026-49103 PoC 9.4 CRITICAL PATCH UNDER REVIEW 0.45% 2026-05-27
CVE-2026-22678 5.1 MEDIUM PATCHED / FIX AVAILABLE 0.22% 2026-05-21
CVE-2025-67738 8.5 HIGH PATCH UNDER REVIEW 0.36% 2025-12-11
CVE-2025-61541 PoC ? N/A UNKNOWN / UNPATCHED 0.06% 2025-10-16
CVE-2024-12828 9.9 CRITICAL PATCH UNDER REVIEW 33.47% 2024-12-30
CVE-2024-44762 PoC ? N/A UNKNOWN / UNPATCHED 2.57% 2024-10-16
CVE-2024-45692 ? N/A PATCH UNDER REVIEW 0.62% 2024-09-04
CVE-2024-36453 ? N/A PATCH UNDER REVIEW 0.40% 2024-07-10
CVE-2024-36452 ? N/A PATCH UNDER REVIEW 0.18% 2024-07-10
CVE-2024-36451 ? N/A PATCH UNDER REVIEW 0.57% 2024-07-10
CVE-2024-36450 ? N/A PATCH UNDER REVIEW 0.30% 2024-07-10
CVE-2023-52046 PoC ? N/A UNKNOWN / UNPATCHED 0.06% 2024-01-25
CVE-2022-36446 PoC ? N/A PATCH UNDER REVIEW 96.05% 2022-07-25
CVE-2022-30708 8.8 HIGH PATCH UNDER REVIEW 3.59% 2022-05-15
CVE-2019-15107 KEV PoC 9.8 CRITICAL PATCH UNDER REVIEW 99.71% 2019-08-16
View all 19 CVEs for Webmin →
▸Intel
Founded1997
CountryUnited Kingdom
LicenseOpen Source
Trust ScoreD — RISKY
Max CVSS9.9
Last Updated2026-07-08
▸Top Weaknesses
CWE-79
Cross-Site Scripting (XSS)
5 occurrences in Webmin CVEs (36% of total)
CWE-79 ⓘ
5
CWE-78
Unknown Weakness Type
2 occurrences in Webmin CVEs (14% of total)
CWE-78 ⓘ
2
CWE-22
Unknown Weakness Type
1 occurrence in Webmin CVEs (7% of total)
CWE-22 ⓘ
1
CWE-352
Cross-Site Request Forgery (CSRF)
1 occurrence in Webmin CVEs (7% of total)
CWE-352 ⓘ
1
CWE-208
Unknown Weakness Type
1 occurrence in Webmin CVEs (7% of total)
CWE-208 ⓘ
1
CWE-116
Unknown Weakness Type
1 occurrence in Webmin CVEs (7% of total)
CWE-116 ⓘ
1
CWE-290
Unknown Weakness Type
1 occurrence in Webmin CVEs (7% of total)
CWE-290 ⓘ
1
CWE-276
Incorrect Default Permissions
1 occurrence in Webmin CVEs (7% of total)
CWE-276 ⓘ
1
▸Company Profile

Webmin is a web-based system administration tool for Unix-like systems, providing a graphical interface for managing users, services, and configurations. Its primary product is the Webmin software itself, along with related modules like Usermin and Virtualmin. The platform is significant in cybersecurity due to its widespread use in server management, making it a frequent target for vulnerability research and exploitation.

▸Response Metrics
Est. MTTR ⓘ ~216 days (Poor)
Mean Time To Remediate. Estimates days from CVE disclosure to patch.
Industry avg: ~60d (good) · 100-300d (poor) · 300d+ (critical)
CVE Trend ⓘ ↗ +400% worse
CVE count 2026 vs 2025:  1 → 5 CVEs
Patch Speed ⓘ Poor (>65% open)
0% of CVEs still unpatched.  Excellent: <20% · Good: 20-40% · Avg: 40-65% · Poor: >65%
▸ Financial Risk Estimate
Est. GDPR Low
€610K
Est. GDPR High
€6.1M

Based on 1 critical CVEs, 0 CISA KEV, 100% unpatched. Model: GDPR Art.83 · not legal advice.

▸Actions
⚖ Compare with another vendor
▸Embed Badge
Webmin D valtersit.com