r
roundcube
Security Risk Profile
42
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 159 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from December 20, 2005 to present
159
Total CVEs
45
Critical+High
14
Exploited
25
Unpatched
Threat Assessment
Avg CVSS
6.4
Base severity
Avg EPSS
82%
Exploit probability
Unpatched
25
Critical/High
Risk Level
42/100
medium
⚠️ 14 Active Exploits⚡ 4 Zero-Days🆕 21Fresh (<7d)📈 22 in Last 30 Days
Severity Distribution
Critical
12High
33Medium
77Low
10Exploit Likelihood
>50% chance
220-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
1
XSS
49
2
CSRF
8
3
Command Injection
6
4
Infoleak
6
5
SSRF
5
Most Affected Products
1. Roundcube Webmail641
2. Roundcube Roundcube Webmail68
3. Debian Debian Linux33
4. Roundcube Roundcube31
5. debian/roundcube28
Recent Vulnerabilities
See more →CVE-2026-107147
CVSS 6.3medium
Authentication bypass by spoofing in twofactor_gauthenticator
Oct 27, 2026🔧 No Patch
CVE-2026-107146
CVSS 6.3medium
Insufficient session expiration in twofactor_gauthenticator
Oct 27, 2026🔧 No Patch
CVE-2026-107145
CVSS 6.3medium
Lack of rate-limiting in 2fa code check mechanism in twofactor_gauthenticator
Oct 27, 2026🔧 No Patch
CVE-2026-114732
CVSS 6.8medium
Oct 22, 2026🔧 No Patch
CVE-2026-114731
CVSS 5.3medium
Oct 22, 2026🔧 No Patch
CVE-2026-114730
CVSS 7.2high
Oct 22, 2026🔧 No Patch
CVE-2026-114729
CVSS 5.3medium
Oct 22, 2026🔧 No Patch
CVE-2026-114728
CVSS 5.3medium
Oct 22, 2026🔧 No Patch
CVE-2026-114727
CVSS 8.3high
Oct 22, 2026🔧 No Patch
CVE-2026-114726
CVSS 5.8medium
Oct 22, 2026🔧 No Patch
Monitor roundcube in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.