EUVD-2026-107887

Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a CSS scoping bypass in HTML messages. rcubeutils::modcssstyles did not treat an at-rule prologue such as @layer a; as a selector boundary, and did not handle selectors beginning with ::, so selectors following an at-rule were...

CVE-2026-114722

Roundcube Webmail versions before 1.6.20 and 1.7.x before 1.7.5 are vulnerable to a CSS scoping bypass within HTML messages. The root cause lies in the rcube_utils::mod_css_styles() function, which fails to recognize at-rule prologues (e.g., @layer a;) as selector boundaries and does not handle s...