PatchTheCVEusermin vulnerabilities and fixes
Recent CVEs affecting usermin, with upgrade or downgrade steps. 2 tracked.
usermin has 2 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 1. Most recent: 2025-04-28. Highest priority: CVE-2015-2079 (score 58/100).
- CVE-2024-44762 MEDIUM 5.3 DOWNGRADE A discrepancy in error messages for invalid login attempts in Webmin Usermin v2.100 allows attackers to enumer
- CVE-2015-2079 CRITICAL 9.9 UPGRADE Usermin 0.980 through 1.x before 1.660 allows uconfig_save.cgi sig_file_free remote code execution because it
FAQ
How do I fix usermin vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is usermin being exploited right now?
None of the tracked usermin CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which usermin CVE should I patch first?
CVE-2015-2079 currently ranks highest (58/100): Usermin 0.980 through 1.x before 1.660 allows uconfig_save.cgi sig_file_free remote code execution because it .