r
roundcube
Security Risk Profile
43
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 160 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from December 20, 2005 to present
160
Total CVEs
47
Critical+High
6
Exploited
14
Unpatched
Threat Assessment
Avg CVSS
6.4
Base severity
Avg EPSS
82%
Exploit probability
Unpatched
14
Critical/High
Risk Level
43/100
medium
⚠️ 6 Active Exploits⚡ 4 Zero-Days📈 23 in Last 30 Days
Severity Distribution
Critical
12High
35Medium
78Low
8Exploit Likelihood
>50% chance
220-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
1
XSS
49
2
CSRF
8
3
Command Injection
6
4
Infoleak
6
5
Path Traversal
5
Most Affected Products
1. Roundcube Webmail677
2. ubuntu/roundcube172
3. debian/roundcube118
4. Roundcube Roundcube Webmail69
5. Debian Debian Linux33
Recent Vulnerabilities
See more →CVE-2026-107147
CVSS 6.3medium
Authentication bypass by spoofing in twofactor_gauthenticator
Oct 27, 2026🔧 No Patch
CVE-2026-107146
CVSS 6.3medium
Insufficient session expiration in twofactor_gauthenticator
Oct 27, 2026🔧 No Patch
CVE-2026-107145
CVSS 6.3medium
Lack of rate-limiting in 2fa code check mechanism in twofactor_gauthenticator
Oct 27, 2026🔧 No Patch
CVE-2026-114729
CVSS 5.3medium
Oct 22, 2026
CVE-2026-114724
CVSS 8.1high
Oct 22, 2026
CVE-2026-114721
CVSS 3.1low
Oct 22, 2026
CVE-2026-114716
CVSS 8.5high
Oct 22, 2026
CVE-2026-114715
CVSS 8.1high
Oct 22, 2026
CVE-2026-114714
CVSS 5.3medium
Oct 22, 2026
CVE-2026-114718
CVSS 6.1medium
Oct 22, 2026
Monitor roundcube in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.