Vendor
Roundcube
- CVEs tracked · all time
- 6
- in CISA KEV · all time
- 3
- articles · since 11 Sep
- 5
- articles · all time
- 13
5 articles since 11 Sep.
Show as table
| Day (UTC) | Articles |
|---|---|
| Thu 24 Sep | 1 |
| Fri 25 Sep | 2 |
| Mon 28 Sep | 2 |
Products: Webmail
CVEs
6 CVEsCVE-2025-49113RoundCube Webmail Deserialization of Untrusted Data VulnerabilityCVSS9.9CriticalExploited99%EPSS5articles
CVE-2024-42009RoundCube Webmail Cross-Site Scripting VulnerabilityCVSS9.3CriticalExploited83%EPSS2articles
CVE-2025-68461RoundCube Webmail Cross-site Scripting VulnerabilityCVSS7.2HighExploited27%EPSS3articles
- Attackers Exploit Roundcube Webmail Flaw to Steal Mailbox DataSecurity Affairs
- Nine Flaws Exploited as Attackers Target Edge Products and WordPressSecurityOnline
- Roundcube SQL Flaw Exploited in Attacks Against Webmail ServersSOCRadar
- Hackers Exploit Roundcube SQL Flaw to Target Webmail ServersSecurityWeek
- Actively Exploited Roundcube Flaw Exposes Email Databases to AttackersSecurityOnline
- Lazarus hits defence via fake job PDFs, CVE-2026-68820Check Point
- UNK_MassTraction Exploits Roundcube Webmail to Hit University Physics DepartmentsSecurityOnline
- Roundcube fixes zero click XSS bug CVE-2026-54433 in new updateSecurityOnline
- China linked hackers hit US Canada universities via RoundcubeInfosecurity
- Roundcube fixes critical SQL injection and code injection bugsSecurityOnline
- CISA urges patches for RoundCube webmail after CVE-2025-49113SecurityWeek
- CISA adds Roundcube webmail RCE CVE-2025-49113 to KEV after saleThe Hacker News
- CISA warns: RoundCube webmail RCE CVE-2025-49113 hits millionsSecurity Affairs · first in our coverage