CVE-2026-125391

7.2 HIGHpublic exploit available

Published 2026-11-10 · Updated 2026-11-10

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

Webmin through 2.670 contains an OS command injection vulnerability in samba/save_euser.cgi that allows authenticated Samba user maintainers to inject commands via unvalidated opts parameter. Attackers can embed shell metacharacters in account option flags passed by create_user and modify_user to backquote_logged, executing commands as root.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-78

Public exploit & PoC references

https://github.com/webmin/webmin
https://github.com/webmin/webmin/blob/2.670/samba/samba-lib.pl#L658
https://github.com/webmin/webmin/commit/18cab89b1fc74ab7e8b1b8b90bbccbe5aba99154

All references

https://github.com/webmin/webmin
https://github.com/webmin/webmin/blob/2.670/samba/samba-lib.pl#L658
https://github.com/webmin/webmin/commit/18cab89b1fc74ab7e8b1b8b90bbccbe5aba99154
https://www.vulncheck.com/advisories/webmin-through-2.670-os-command-injection-via-samba-user-account-options

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

HIGHCVE-2013-20007PoC
HIGHCVE-2020-37279PoC
CRITICALCVE-2020-37282PoC
HIGHCVE-2022-51019PoC
CRITICALCVE-2024-4457PoC
HIGHCVE-2025-14754
CRITICALCVE-2025-31704
CRITICALCVE-2025-71429PoC

Related by shared AI tags and CWE weakness class. Browse the full archive.