Critical Alert 2 Active Exploits Detected Today

CVE-2026-16232 — Check Point SmartConsole Improper Authentication Vulnerability →
CVE-2026-50522 — Microsoft SharePoint Deserialization of Untrusted Data Vulnerability →
Powered by CVE Watchtower
×
July 23, 2026

CVE Watchtower


← Back to CVE List

CVE-2023-43770NVD

Vulnerability Summary

Roundcube before 1.4.14, 1.5.x before 1.5.4, and 1.6.x before 1.6.3 allows XSS via text/plain e-mail messages with crafted links because of program/lib/Roundcube/rcube_string_replacer.php behavior.
Severity Level
UNKNOWN
Published Date
Sep 22, 2023
Last Modified
Oct 21, 2025
Exploitation Status
ACTIVE
EPSS Score (30-Day)
Data Pending
Root Weakness (CWE)
N/A

External References