roundcube
Security Risk Profile
46
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 127 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from December 20, 2005 to present
127
Total CVEs
34
Critical+High
14
Exploited
19
Unpatched
Threat Assessment
Avg CVSS
6.4
Base severity
Avg EPSS
82%
Exploit probability
Unpatched
19
Critical/High
Risk Level
46/100
medium
⚠️ 14 Active Exploits⚡ 4 Zero-Days📈 6 in Last 30 Days
Severity Distribution
Critical
11High
23Medium
59Low
7Exploit Likelihood
>50% chance
220-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
1
XSS
46
2
CSRF
7
3
Infoleak
6
4
Path Traversal
4
5
Input Validation
4
Most Affected Products
1. Roundcube Webmail616
2. Roundcube Roundcube Webmail41
3. Debian Debian Linux33
4. Roundcube Roundcube31
5. debian/roundcube28
Recent Vulnerabilities
See more →CVE-2026-54432
CVSS 4.7medium
+moRoundcube XSS/SSRF/etc prior to 1.6.17/1.7.2
7/14/2026🔧 No Patch
CVE-2026-54433
CVSS 10.0critical
7/14/2026🔧 No Patch
CVE-2026-62644
CVSS 9.8critical
7/14/2026
CVE-2026-62643
CVSS 10.0critical
7/14/2026🔧 No Patch
CVE-2026-62642
CVSS 4.3medium
7/14/2026
CVE-2026-62641
CVSS 4.3medium
7/14/2026
https://seclists.org/oss-sec/2026/q2/803
unknown
CVE-2026-48842+moRoundcube numerous vulnerabilities prior to 1.6.16/1.7.1
6/3/2026🔧 No Patch
CVE-2026-9818
CVSS 4.7medium
Roundcube Local/Private URL Fetch Bypass
5/28/2026
CVE-2026-48849
CVSS 4.4medium
5/25/2026🔧 No Patch
CVE-2026-48848
CVSS 7.2high
5/25/2026🔧 No Patch
Monitor roundcube in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.