Skip to content
OpenAdvisories
Medium WID-SEC-2026-0789 9 CVEs

Roundcube: Mehrere Schwachstellen

Published Mar 18, 2026 · Updated Oct 5, 2026 · Revision 8 · de-DE

Vendor: Debian Vendor: SUSE Product: Linux Product: openSUSE Platform: Linux Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in Roundcube ausnutzen, um Dateien zu manipulieren, um Sicherheitsvorkehrungen zu umgehen, um einen Cross-Site Scripting Angriff durchzuführen, und um Informationen offenzulegen.

Product

Roundcube ist ein Open-Source Webmailsystem, basierend auf PHP.

Vulnerabilities 9

  • Medium 6.1
    CVE-2026-35539

    Roundcube Webmail: Insufficient HTML attachment sanitization in preview mode

    An issue was discovered in Roundcube Webmail before 1.5.14 and 1.6.14. XSS exists because of insufficient HTML attachment sanitization in preview mode. A victim must preview a text/html attachment.

    Roundcube Webmail roundcube roundcube Debian Ubuntu Packagist
  • Medium 5.4
    CVE-2026-35540

    Roundcube Webmail: Insufficient CSS sanitization in HTML e-mail messages

    An issue was discovered in Roundcube Webmail 1.6.0 before 1.6.14. Insufficient Cascading Style Sheets (CSS) sanitization in HTML e-mail messages may lead to SSRF or Information Disclosure, e.g., if stylesheet links point to local network hosts.

    Roundcube Webmail roundcube roundcube Debian Ubuntu Packagist
  • Medium 5.3
    CVE-2026-35542

    Roundcube: Bypass of remote image blocking via crafted BODY background attribute

    An issue was discovered in Roundcube Webmail before 1.5.14 and 1.6.14. The remote image blocking feature can be bypassed via a crafted background attribute of a BODY element in an e-mail message. This may lead to information disclosure or access-control bypas…

    Roundcube Webmail roundcube roundcube Debian Ubuntu Packagist
  • Medium 5.3
    CVE-2026-35543

    Roundcube Webmail: Bypass of remote image blocking via SVG content (with animate attributes) in an e-mail message

    An issue was discovered in Roundcube Webmail before 1.5.14 and 1.6.14. The remote image blocking feature can be bypassed via SVG content (with animate attributes) in an e-mail message. This may lead to information disclosure or access-control bypass.

    Roundcube Webmail roundcube roundcube Debian Ubuntu Packagist
  • Medium 5.3
    CVE-2026-35544

    Roundcube Webmail: Insufficient CSS sanitization in HTML e-mail messages

    An issue was discovered in Roundcube Webmail before 1.5.14 and 1.6.14. Insufficient Cascading Style Sheets (CSS) sanitization in HTML e-mail messages may lead to a fixed-position mitigation bypass via the use of !important.

    Roundcube Webmail roundcube roundcube Debian Ubuntu Packagist
  • Medium 5.3
    CVE-2026-35545

    Roundcube Webmail: Remote image blocking feature can be bypassed via SVG content in an e-mail message

    An issue was discovered in Roundcube Webmail before 1.5.15 and 1.6.15. The remote image blocking feature can be bypassed via SVG content in an e-mail message. This may lead to information disclosure or access-control bypass. This involves the animate element …

    Roundcube Webmail roundcube roundcube Debian Ubuntu Packagist
  • Medium 4.2
    CVE-2026-35541

    Roundcube Webmail: Incorrect password comparison in the password plugin

    An issue was discovered in Roundcube Webmail before 1.5.14 and 1.6.14. Incorrect password comparison in the password plugin could lead to type confusion that allows a password change without knowing the old password.

    Roundcube Webmail roundcube roundcube Debian Ubuntu Packagist
  • Low 3.7
    CVE-2026-35537

    Roundcube Webmail: Unsafe deserialization in the redis/memcache session handler

    An issue was discovered in Roundcube Webmail before 1.5.14 and 1.6.14. Unsafe deserialization in the redis/memcache session handler may lead to arbitrary file write operations by unauthenticated attackers via crafted session data.

    Roundcube Webmail roundcube roundcube Debian Ubuntu Packagist
  • Low 3.1
    CVE-2026-35538

    Roundcube Webmail: Unsanitized IMAP SEARCH command arguments

    An issue was discovered in Roundcube Webmail before 1.5.14 and 1.6.14. Unsanitized IMAP SEARCH command arguments could lead to IMAP injection or CSRF bypass during mail search.

    Roundcube Webmail roundcube roundcube Debian Ubuntu Packagist

Revision history

  1. #8

    Neue Updates von Debian aufgenommen

  2. #7

    Neue Updates von Debian aufgenommen

  3. #6

    Neue Updates von Debian aufgenommen

  4. #5

    Neue Updates von Debian aufgenommen

  5. #4

    Neue Updates von openSUSE aufgenommen

  6. #3

    Neue Updates von openSUSE aufgenommen

  7. #2

    Neue Updates von Debian aufgenommen

  8. #1

    Initiale Fassung

References