r
roundcube
Security Risk Profile
44
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 137 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from December 20, 2005 to present
137
Total CVEs
37
Critical+High
14
Exploited
22
Unpatched
Threat Assessment
Avg CVSS
6.4
Base severity
Avg EPSS
82%
Exploit probability
Unpatched
22
Critical/High
Risk Level
44/100
medium
⚠️ 14 Active Exploits⚡ 4 Zero-Days📈 10 in Last 30 Days
Severity Distribution
Critical
11High
26Medium
66Low
7Exploit Likelihood
>50% chance
220-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
1
XSS
48
2
CSRF
7
3
Infoleak
6
4
Command Injection
4
5
SSRF
4
Most Affected Products
1. Roundcube Webmail616
2. Roundcube Roundcube Webmail54
3. Debian Debian Linux33
4. Roundcube Roundcube31
5. debian/roundcube28
Recent Vulnerabilities
See more →CVE-2026-75010
CVSS 6.4medium
Aug 17, 2026🔧 No Patch
CVE-2026-75007
CVSS 5.4medium
Aug 17, 2026🔧 No Patch
CVE-2026-75006
CVSS 5.8medium
Aug 17, 2026🔧 No Patch
CVE-2026-75004
CVSS 4.3medium
Aug 17, 2026🔧 No Patch
CVE-2026-75003
CVSS 5.8medium
Aug 17, 2026🔧 No Patch
CVE-2026-75002
CVSS 7.1high
Aug 17, 2026🔧 No Patch
CVE-2026-75000
CVSS 5.8medium
Aug 17, 2026🔧 No Patch
CVE-2026-74999
CVSS 5.4medium
Aug 17, 2026🔧 No Patch
CVE-2026-74998
CVSS 7.2high
Aug 17, 2026🔧 No Patch
CVE-2026-74997
CVSS 8.8high
Aug 17, 2026🔧 No Patch
Monitor roundcube in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.