Product · Roundcube

Webmail

58 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Medium 4.4

CVE-2026-48849 Public exploit

In Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1, an unsanitized subject field in the draft restored val…

Roundcube Webmail roundcube roundcube Debian Ubuntu

May 25, 2026
Medium 4.3

CVE-2026-25916 Public exploit

Roundcube Webmail before 1.5.13 and 1.6 before 1.6.13, when "Block remote images" is used, does not block SVG feImage.

Roundcube Webmail roundcube roundcube Debian Ubuntu

Feb 9, 2026