Package · Ubuntu

roundcube

97 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

Medium 4.4

CVE-2026-48849 Public exploit

In Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1, an unsanitized subject field in the draft restored val…

Roundcube Webmail roundcube roundcube Debian Ubuntu

May 25, 2026
Medium 4.3

CVE-2026-25916 Public exploit

Roundcube Webmail before 1.5.13 and 1.6 before 1.6.13, when "Block remote images" is used, does not block SVG feImage.

Roundcube Webmail roundcube roundcube Debian Ubuntu

Feb 9, 2026
Medium 6.1

CVE-2024-37383 Exploited Public exploit EPSS 74%

Roundcube Webmail before 1.5.7 and 1.6.x before 1.6.7 allows XSS via SVG animate attributes.

roundcube roundcube Debian Ubuntu

Jun 7, 2024
KEV Oct 24, 2024
Medium 6.1

CVE-2023-43770 Exploited Public exploit EPSS 64%

Roundcube before 1.4.14, 1.5.x before 1.5.4, and 1.6.x before 1.6.3 allows XSS via text/plain e-mail messages with craf…

roundcube roundcube Debian Ubuntu

Sep 22, 2023
KEV Feb 12, 2024
Medium 6.1

CVE-2020-35730 Exploited Public exploit EPSS 33%

An XSS issue was discovered in Roundcube Webmail before 1.2.13, 1.3.x before 1.3.16, and 1.4.x before 1.4.10. The attac…

roundcube roundcube Debian Ubuntu

Dec 28, 2020
KEV Jun 22, 2023
Medium 6.3

CVE-2020-13965 Exploited Public exploit EPSS 77%

An issue was discovered in Roundcube Webmail before 1.3.12 and 1.4.x before 1.4.5. There is XSS via a malicious XML att…

roundcube roundcube Debian Ubuntu

Jun 9, 2020
KEV Jun 26, 2024