CVE-2022-36446: Webmin

Critical severity, CVSS 9.8. EPSS: 95.9% chance of exploitation in the next 30 days.

software/apt-lib.pl in Webmin before 1.997 lacks HTML escaping for a UI command.

Affected products

• Webmin Webmin: before 1.997 (fixed in 1.997)

Published 2022-07-25. Last modified 2026-06-17.