poslední zpráva
SPOJENO AI EPSS 0.01 (nejvyšší)
Roundcube Webmail Security updates 1.6.20 and 1.7.5 released
Classification: Important, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: None, CVEs: , Summary: We just published security updates to the 1.6 LTS and 1.7 versions of Roundcube Webmail. They both contain fixes for recently reported security vulnerabilities.
Roundcube CA FI IT FR
CVE v události 6
| CVE | hodnocení | KEV | EPSS |
|---|---|---|---|
| CVE-2026-113386 | 7.1 3.1 · mitre | – | 0.01 |
| CVE-2026-114716 | 8.5 3.1 · mitre | – | 0.00 |
| CVE-2026-114720 | 7.1 3.1 · mitre | – | 0.01 |
| CVE-2026-114724 | 7.4 3.1 · mitre | – | 0.00 |
| CVE-2026-114727 | 8.3 3.1 · mitre | – | 0.00 |
| CVE-2026-114730 | 7.2 3.1 · mitre | – | 0.00 |
Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE.
Jak se o tom psalo 5
-
· Cyber Centre Kanada CA
Roundcube security advisory (AV26-1075)
Serial Number: AV26-1075 Date: October 22, 2026 As of October 19, 2026, Roundcube is affected by vulnerabilities in the following product: Roundcube Webmail Prior to 1.6.20 Prior to 1.7.5 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. Security updates 1.6.20 and 1.7.5 released Roundcube Open Source Webmail Software
-
· zachyceno · NCSC-FI FI nadpis události
Roundcube Webmail Security updates 1.6.20 and 1.7.5 released
Classification: Important, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: None, CVEs: , Summary: We just published security updates to the 1.6 LTS and 1.7 versions of Roundcube Webmail. They both contain fixes for recently reported security vulnerabilities.
-
· CSIRT Itálie (ACN) IT
Risolte vulnerabilità in Roundcube Webmail
Rilasciati aggiornamenti di sicurezza per risolvere 20 vulnerabilità, di cui 6 con gravità “alta”, in Roundcube Webmail, noto gestore di posta elettronica open source. Tali vulnerabilità, qualora sfruttate, potrebbero consentire ad un attaccante remoto di eludere meccanismi di sicurezza e di manipolare dati e contenuti sui sistemi interessati.
-
· CSIRT Itálie (ACN) IT
Risolta vulnerabilità in Roundcube Webmail
Rilasciati aggiornamenti di sicurezza per risolvere una vulnerabilità con gravità “alta” in Roundcube Webmail, noto gestore di posta elettronica open source. Tale vulnerabilità, qualora sfruttata, potrebbe consentire ad un attaccante remoto autenticato di eseguire comandi IMAP arbitrari sui sistemi target.
-
· zachyceno · CERT-FR – avis FR
Multiples vulnérabilités dans Roundcube Webmail (19 octobre 2026)
De multiples vulnérabilités ont été découvertes dans Roundcube Webmail. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une falsification de requêtes côté serveur (SSRF) et une injection de code indirecte à distance (XSS).