CVE-2020-35606

Arbitrary command execution can occur in Webmin through 1.962. Any user authorized for the Package Updates module can execute arbitrary commands with root privileges via vectors involving %0A and %0C. NOTE: this issue exists because of an incomplete fix for CVE-2019-12840.

• CWE-78

• http://packetstormsecurity.com/files/160676/Webmin-1.962-Remote-Command-Execution.htmlExploit, Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/49318Exploit, Third Party Advisory, VDB Entry
• https://www.pentest.com.tr/exploits/Webmin-1962-PU-Escape-Bypass-Remote-Command-Execution.htmlExploit, Third Party Advisory
• https://www.webmin.com/download.htmlProduct
• http://packetstormsecurity.com/files/160676/Webmin-1.962-Remote-Command-Execution.htmlExploit, Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/49318Exploit, Third Party Advisory, VDB Entry
• https://www.pentest.com.tr/exploits/Webmin-1962-PU-Escape-Bypass-Remote-Command-Execution.htmlExploit, Third Party Advisory
• https://www.webmin.com/download.htmlProduct

Published

Dec 21, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-35594Zoho ManageEngine ADManager Plus before 7066 allows XSS.6.1
• CVE-2020-35597Victor CMS 1.0 is vulnerable to SQL injection via c_id param…8.8
• CVE-2020-35598ACS Advanced Comment System 1.0 is affected by Directory Tra…7.5
• CVE-2020-3560A vulnerability in Cisco Aironet Access Points (APs) could a…8.6
• CVE-2020-35604An XXE attack can occur in Kronos WebTA 5.0.4 when SAML is u…9.8
• CVE-2020-35605The Graphics Protocol feature in graphics.c in kitty before …9.8
• CVE-2020-35608A code execution vulnerability exists in the normal world’s …7.8
• CVE-2020-35609A denial-of-service vulnerability exists in the asynchronous…5.5
• CVE-2020-3561A vulnerability in the Clientless SSL VPN (WebVPN) of Cisco …4.7
• CVE-2020-35610An issue was discovered in Joomla! 2.5.0 through 3.9.22. The…7.5
• CVE-2020-35611An issue was discovered in Joomla! 2.5.0 through 3.9.22. The…7.5
• CVE-2020-35612An issue was discovered in Joomla! 2.5.0 through 3.9.22. The…7.5