CVE-2021-31762: Webmin

High severity, CVSS 8.8. EPSS: 8.8% chance of exploitation in the next 30 days.

Webmin 1.973 is affected by Cross Site Request Forgery (CSRF) to create a privileged user through Webmin's add users feature, and then get a reverse shell through Webmin's running process feature.

Affected products

• Webmin Webmin: version 1.973 only

Published 2021-04-25. Last modified 2026-06-17.