Webmin Vulnerabilities Allow 2FA Bypass and Root Attacks; Patches Released (heise.de)

• Critical vulnerabilities discovered in Webmin
• 2FA bypass and unauthenticated root attacks possible
• Patches available for versions before 2.111

"Multiple security vulnerabilities have been discovered in Webmin, a popular web-based server administration tool. Attackers can bypass two-factor authentication (2FA) and gain root access without authentication. The developers have released security patches fixing these issues. Administrators are strongly advised to update to version 2.111 or later immediately to protect their systems."