roundcube

6 results · Clear filters · Feed

• Medium 4.4
  CVE-2026-48849 Public exploit

  In Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1, an unsanitized subject field in the draft restored val…

  Roundcube Webmail roundcube roundcube Debian Ubuntu
  May 25, 2026
• Medium 4.3
  CVE-2026-25916 Public exploit

  Roundcube Webmail before 1.5.13 and 1.6 before 1.6.13, when "Block remote images" is used, does not block SVG feImage.

  Roundcube Webmail roundcube roundcube Debian Ubuntu
  Feb 9, 2026
• Medium 6.1
  CVE-2024-37383 Exploited Public exploit EPSS 74%

  Roundcube Webmail before 1.5.7 and 1.6.x before 1.6.7 allows XSS via SVG animate attributes.

  roundcube roundcube Debian Ubuntu
  Jun 7, 2024

  KEV Oct 24, 2024
• Medium 6.1
  CVE-2023-43770 Exploited Public exploit EPSS 64%

  Roundcube before 1.4.14, 1.5.x before 1.5.4, and 1.6.x before 1.6.3 allows XSS via text/plain e-mail messages with craf…

  roundcube roundcube Debian Ubuntu
  Sep 22, 2023

  KEV Feb 12, 2024
• Medium 6.1
  CVE-2020-35730 Exploited Public exploit EPSS 33%

  An XSS issue was discovered in Roundcube Webmail before 1.2.13, 1.3.x before 1.3.16, and 1.4.x before 1.4.10. The attac…

  roundcube roundcube Debian Ubuntu
  Dec 28, 2020

  KEV Jun 22, 2023
• Medium 6.3
  CVE-2020-13965 Exploited Public exploit EPSS 77%

  An issue was discovered in Roundcube Webmail before 1.3.12 and 1.4.x before 1.4.5. There is XSS via a malicious XML att…

  roundcube roundcube Debian Ubuntu
  Jun 9, 2020

  KEV Jun 26, 2024