CVE-2024-12828 (CVSS 9.9): Webmin Vulnerability Leaves a Million Servers Exposed to RCE

Share:

The popular web-based system administration tool, Webmin, has been found to harbor a critical security vulnerability (CVE-2024-12828) that could allow attackers to seize control of servers. With an estimated one million installations worldwide, the impact of this vulnerability could be widespread.

The vulnerability, assigned a CVSS score of 9.9, stems from a command injection flaw within Webmin’s CGI request handling. Essentially, the software fails to properly sanitize user-supplied input, enabling attackers to inject malicious commands that are then executed with root privileges.

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Webmin. Authentication is required to exploit this vulnerability,” the advisory notes.

What makes this vulnerability particularly dangerous is that it can be exploited by less-privileged Webmin users. This means that even if an attacker doesn’t have full administrative access, they could potentially escalate their privileges and take complete control of the server.

The exploitability of CVE-2024-12828 could have devastating consequences, including:

  • Full server compromise
  • Unauthorized access to sensitive data
  • Deployment of malicious scripts and ransomware
  • Use of compromised servers as platforms for further attacks

The vulnerability was discovered by Trend Micro’s Zero Day Initiative and has been addressed in Webmin version 2.111. All Webmin and Virtualmin administrators are strongly urged to update their installations immediately.

Source

Leave a Comment

Your email address will not be published. Required fields are marked *

loader-image
London, GB
8:30 am, Jul 8, 2025
weather icon 15°C
L: 14° | H: 16°
clear sky
Humidity: 70 %
Pressure: 1017 mb
Wind: 10 mph NNW
Wind Gust: 0 mph
UV Index: 0
Precipitation: 0 mm
Clouds: 0%
Rain Chance: 0%
Visibility: 10 km
Sunrise: 4:53 am
Sunset: 9:17 pm
DailyHourly
Daily ForecastHourly Forecast
Today 10:00 pm
weather icon
14° | 16°°C 0 mm 0% 8 mph 65 % 1019 mb 0 mm/h
Tomorrow 10:00 pm
weather icon
15° | 26°°C 0.1 mm 10% 8 mph 59 % 1023 mb 0 mm/h
Thu Jul 10 10:00 pm
weather icon
18° | 30°°C 0 mm 0% 7 mph 75 % 1024 mb 0 mm/h
Fri Jul 11 10:00 pm
weather icon
19° | 29°°C 0 mm 0% 9 mph 68 % 1023 mb 0 mm/h
Sat Jul 12 10:00 pm
weather icon
18° | 28°°C 0 mm 0% 11 mph 71 % 1020 mb 0 mm/h
Today 10:00 am
weather icon
16° | 17°°C 0 mm 0% 8 mph 65 % 1017 mb 0 mm/h
Today 1:00 pm
weather icon
20° | 23°°C 0 mm 0% 8 mph 44 % 1018 mb 0 mm/h
Today 4:00 pm
weather icon
25° | 25°°C 0 mm 0% 7 mph 28 % 1017 mb 0 mm/h
Today 7:00 pm
weather icon
24° | 24°°C 0 mm 0% 7 mph 28 % 1017 mb 0 mm/h
Today 10:00 pm
weather icon
19° | 19°°C 0 mm 0% 5 mph 40 % 1019 mb 0 mm/h
Tomorrow 1:00 am
weather icon
17° | 17°°C 0 mm 0% 5 mph 50 % 1020 mb 0 mm/h
Tomorrow 4:00 am
weather icon
15° | 15°°C 0 mm 0% 4 mph 59 % 1021 mb 0 mm/h
Tomorrow 7:00 am
weather icon
16° | 16°°C 0 mm 0% 5 mph 53 % 1021 mb 0 mm/h
Name Price24H (%)
Bitcoin(BTC)
€92,278.27
-0.57%
Ethereum(ETH)
€2,172.34
-0.83%
Tether(USDT)
€0.85
-0.01%
XRP(XRP)
€1.93
-0.35%
Solana(SOL)
€126.99
-1.58%
USDC(USDC)
€0.85
0.00%
Dogecoin(DOGE)
€0.142767
-3.06%
Shiba Inu(SHIB)
€0.000010
-0.03%
Pepe(PEPE)
€0.000009
-1.81%
Scroll to Top