CVEFinder.io

CVE-2025-61541

⚠️ high
🔍 Scan for this CVE
Summary

Webmin 2.510 is vulnerable to a Host Header Injection in the password reset functionality (forgot_send.cgi). The reset link sent to users is constructed using the HTTP Host header via get_webmin_email_url(). An attacker can manipulate the Host header to inject a malicious domain into the reset email. If a victim follows the poisoned link, the attacker can intercept the reset token and gain full control of the target account.

CVSS Score
7.1
High
EPSS Score
0.1
Exploit Probability
Published Date
2025-10-16
First Seen: 2026-01-05
📊 Relative Risk Intelligence

This CVE is Moderate Risk - more severe than 53.3% of all 330,193 vulnerabilities in our database.

#154,204
Above average severity
Severity Percentile
🎯 CISA SSVC Assessment Updated: Oct 16, 2025
🔍 Exploitation Status
None
No known exploits
⚙️ Automatable
NO
Requires human interaction
💥 Technical Impact
Total
Complete system compromise possible
SSVC data provided by CISA
Last Modified 2025-11-06
Source NVD 🔗
CVSS Vector 3.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H
CWE IDs (Weakness Types)

📦 Affected Products 1

🔗 References 3

🔗 Related CVEs 6

CVE ID Severity CVSS EPSS Summary Published
CVE-2026-22678 🔶 medium 5.4 0.0 Webmin before 2.641 contains a stored cross-site scripting vulnerability in the email template description field of the ... 2026-05-21
CVE-2025-67738 ⚠️ high 8.5 0.1 squid/cachemgr.cgi in Webmin before 2.600 does not properly quote arguments. This is relevant if Webmin's Squid module a... 2025-12-11
CVE-2024-12828 ⚠️ high 8.8 21.7 Webmin CGI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute ... 2024-12-30
CVE-2024-45692 ⚠️ high 7.5 0.1 Webmin before 2.202 and Virtualmin before 7.20.2 allow a network traffic loop via spoofed UDP packets on port 10000. 2024-09-04
CVE-2024-36450 🔶 medium 5.4 0.2 Cross-site scripting vulnerability exists in sysinfo.cgi of Webmin versions prior to 1.910. If this vulnerability is exp... 2024-07-10
CVE-2024-36451 ⚠️ high 8.8 0.2 Improper handling of insufficient permissions or privileges vulnerability exists in ajaxterm module of Webmin prior to 2... 2024-07-10
These CVEs affect the same products