Where
-Infinity
0

Trending

Last week
Last month
Last year

oss-secCVE-2026-54432+moRoundcube XSS/SSRF/etc prior to 1.6.17/1.7.2

First published (updated )
https://seclists.org/oss-sec/2026/q3/203

oss-secCVE-2026-26079/CVE-2026-25916: Roundcube vulns prior to 1.5.13/1.6.13

First published (updated )
https://seclists.org/oss-sec/2026/q1/196

Roundcube Webmailand moXSS vulnerabilities in Roundcube webmail

Risk 69
Severity
9.3
First published (updated )
CVE-2024-42008

Roundcube WebmailXSS

Risk 39
Severity
6.1
First published (updated )
CVE-2024-37384

BleepingComputerCISA: Roundcube email server bug now exploited in attacks

Zeroday
First published (updated )
News
BleepingComputer
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Fedoraproject FedoraXSS

Risk 39
Severity
6.1
First published (updated )
CVE-2023-47272

Debian Debian LinuxXSS

Risk 38
Severity
6.1
First published (updated )
CVE-2021-44025

Roundcube WebmailXSS

Risk 34
Severity
5.4
First published (updated )
CVE-2020-18671

Roundcube WebmailXSS

Risk 34
Severity
5.4
First published (updated )
CVE-2020-18670

Fedoraproject FedoraXSS

Risk 34
Severity
5.4
First published (updated )
CVE-2021-26925
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Roundcube WebmailXSS

Risk 38
Severity
6.1
First published (updated )
CVE-2020-16145

Roundcube WebmailXSS

Risk 38
Severity
6.1
First published (updated )
CVE-2020-15562

debian/roundcubeXSS

Risk 38
Severity
6.1
First published (updated )
CVE-2020-13964

Roundcube WebmailPath Traversal

Risk 86
Severity
9.8
First published (updated )
CVE-2020-12640

debian/roundcubeCSRF

Risk 37
Severity
6.5
First published (updated )
CVE-2020-12626
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

debian/roundcubeXSS

Risk 38
Severity
6.1
First published (updated )
CVE-2020-12625

Roundcube WebmailRoundcube Webmail through 1.3.9 mishandles Punycode xn-- domain names, leading to homograph attacks.

Risk 42
Severity
7.4
First published (updated )
CVE-2019-15237

openSUSE Backports SLEIn Roundcube Webmail before 1.3.10, an attacker in possession of S/MIME or PGP encrypted emails can …

Risk 22
Severity
4.3
First published (updated )
CVE-2019-10740

Roundcube WebmailInfoleak

Risk 43
Severity
7.5
First published (updated )
CVE-2018-19205

debian/roundcuberoundcube version 1.3.4 and earlier contains an Insecure Permissions vulnerability in enigma plugin …

Risk 43
Severity
7.5
First published (updated )
CVE-2018-1000071
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Roundcube WebmailInfoleak

Risk 43
Severity
7.5
First published (updated )
CVE-2015-5383

Roundcube WebmailXSS

Risk 38
Severity
6.1
First published (updated )
CVE-2015-5381

Roundcube WebmailInfoleak

Risk 38
Severity
6.5
First published (updated )
CVE-2015-5382

Roundcube WebmailXSS

Risk 38
Severity
6.1
First published (updated )
CVE-2016-4068

Roundcube WebmailXSS

Risk 38
Severity
6.1
First published (updated )
CVE-2015-8864
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Roundcube WebmailXSS

Risk 38
Severity
6.1
First published (updated )
CVE-2016-4552

Roundcube Webmailsteps/mail/sendmail.inc in Roundcube before 1.1.7 and 1.2.x before 1.2.3, when no SMTP server is con…

Risk 70
Severity
7.5
First published (updated )
CVE-2016-9920

openSUSE LeapCSRF

Risk 77
Severity
8.8
First published (updated )
CVE-2016-4069

Roundcube WebmailXSS

Risk 18
Severity
3.5
First published (updated )
CVE-2015-8105

Roundcube WebmailXSS

Risk 22
Severity
4.3
First published (updated )
CVE-2015-1433
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203