webmail

Roundcube 1.6.20 and 1.7.5 Fix 20 Security Flaws, Including IMAP Command Injection

• Vulnerability Report

Roundcube 1.6.20 and 1.7.5 Fix 20 Security Flaws, Including IMAP Command Injection

Do Son October 19, 2026 0

A Roundcube security update fixes 20 flaws, including IMAP command injection and header injection. Upgrade to 1.6.20 or 1.7.5 now.

Roundcube Patches RCE and SSRF Flaws in 1.6.18 and 1.7.3

• Vulnerability Report

Roundcube Patches RCE and SSRF Flaws in 1.6.18 and 1.7.3

Do Son August 15, 2026 0

Roundcube fixes a webmail RCE flaw and an SSRF filter bypass in versions 1.6.18 and 1.7.3. Update your mail server now.

Critical Roundcube Webmail Security Updates Fix Severe Flaws

• Vulnerability Report

Critical Roundcube Webmail Security Updates Fix Severe Flaws

Do Son May 28, 2026 0

New Roundcube Webmail updates fix security flaws that could expose mailboxes. See which versions are affected and update your server now.

Roundcube Alert: High-Severity SVG XSS and CSS Sanitizer Flaws Threaten Webmail Privacy

• Vulnerability Report

Roundcube Alert: High-Severity SVG XSS and CSS Sanitizer Flaws Threaten Webmail Privacy

Do Son December 19, 2025 0

Roundcube patches two High-severity flaws: an SVG-based XSS and a CSS sanitizer bypass. Protect your inbox—update to v1.6.12 or v1.5.12 now.

UNC1151 Exploits Roundcube Flaw in Spear Phishing Attack

• Cyber Security
• Vulnerability Report

UNC1151 Exploits Roundcube Flaw in Spear Phishing Attack

Do Son June 9, 2025 0

CERT Polska warns of a critical Roundcube XSS flaw (CVE-2024-42009) exploited by UNC1151 in spear phishing, stealing credentials and compromising Polish organizations.

Critical RCE Flaw Patched in Roundcube Webmail: Update Immediately!

• Vulnerability Report

Critical RCE Flaw Patched in Roundcube Webmail: Update Immediately!

Do Son June 2, 2025 0

Roundcube Webmail has patched a critical RCE vulnerability (CVE-2025-49113) allowing remote code execution post-authentication. Update to 1.6.2 or 1.5.10 immediately!

Operation RoundPress: Sednit Weaponizes XSS to Breach Global Webmail Servers

• Cyber Security
• Vulnerability

Operation RoundPress: Sednit Weaponizes XSS to Breach Global Webmail Servers

Do Son May 16, 2025 0

Russia-linked APT28 (Sednit/Fancy Bear) targets vulnerable webmail with XSS in Operation RoundPress, stealing data from global entities.