Input Validation and Logic

Every one of the 6 is a mark on the map. Named now: 1 to 6, most at risk first.

1. In Roundcube from versions 1.2.0 to 1.3.5, with the archive plugin enabled and configured, it's possible to exploit the unsanitized, user-controlled "_uid" parameter (in an archiv…CVE-2018-9846Roundcube · 2.3% likely

   CWE-20

2. steps/utils/modcss.inc in Roundcube Webmail before 0.5.1 does not properly verify that a request is an expected request for an external Cascading Style Sheets (CSS) stylesheet, wh…CVE-2011-1492Roundcube · 1.8% likely

   CWE-20

3. The login form in Roundcube Webmail before 0.5.1 does not properly handle a correctly authenticated but unintended login attempt, which makes it easier for remote authenticated us…CVE-2011-1491Roundcube · 1.5% likely

   CWE-20

4. Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1 has insecure code evaluation logic in LDAP the autovalues option that could lead to code injection. (Support for code…CVE-2026-48844Roundcube · CVSS 7.5 · 0.4% likelycovered by CyberSIXT

   CWE-670

5. Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a remote content blocking bypass. rcube_washtml inspected the SVG SMIL animation attributes `to`, `from` and…CVE-2026-114729Roundcube · CVSS 5.3 · 0.4% likely

   CWE-184

6. Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a remote content blocking bypass in the handling of FuncIRI attributes. rcube_washtml detected the CSS url()…CVE-2026-114728Roundcube · CVSS 5.3 · 0.4% likely

   CWE-184

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.