r
roundcube
Security Risk Profile
48
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 137 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from December 20, 2005 to present
137
Total CVEs
39
Critical+High
14
Exploited
19
Unpatched
Threat Assessment
Avg CVSS
6.4
Base severity
Avg EPSS
82%
Exploit probability
Unpatched
19
Critical/High
Risk Level
48/100
medium
⚠️ 14 Active Exploits⚡ 4 Zero-Days
Severity Distribution
Critical
12High
27Medium
64Low
7Exploit Likelihood
>50% chance
220-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
1
XSS
48
2
CSRF
7
3
Infoleak
6
4
Command Injection
4
5
SSRF
4
Most Affected Products
1. Roundcube Webmail636
2. Roundcube Roundcube Webmail54
3. Debian Debian Linux33
4. Roundcube Roundcube31
5. debian/roundcube28
Recent Vulnerabilities
See more →CVE-2026-75010
CVSS 6.4medium
Aug 17, 2026
CVE-2026-75007
CVSS 8.8high
Aug 17, 2026
CVE-2026-75006
CVSS 5.8medium
Aug 17, 2026🔧 No Patch
CVE-2026-75004
CVSS 4.3medium
Aug 17, 2026🔧 No Patch
CVE-2026-75003
CVSS 9.8critical
Aug 17, 2026
CVE-2026-75002
CVSS 7.1high
Aug 17, 2026
CVE-2026-75000
CVSS 5.8medium
Aug 17, 2026🔧 No Patch
CVE-2026-74999
CVSS 5.4medium
Aug 17, 2026
CVE-2026-74998
CVSS 7.2high
Aug 17, 2026
CVE-2026-74997
CVSS 8.8high
Aug 17, 2026
Monitor roundcube in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.