DEBIAN-CVE-2026-75004

In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, improper rule name quoting could lead to managesievedisabledactions setting bypass via a crafted rule name in a Sieve script. This issue only affects Roundcube instances using the managesieve plugin...

CVE-2026-75004

In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, improper rule name quoting could lead to managesievedisabledactions setting bypass via a crafted rule name in a Sieve script. This issue only affects Roundcube instances using the managesieve plugin...

CVE-2026-75004

In Roundcube Webmail, improper rule name quoting in the managesieve plugin allows a crafted Sieve rule name to bypass the managesieve_disabled_actions setting, letting users re-enable restricted Sieve actions (e.g., redirect, discard). Affects Roundcube <1.6.18 and 1.7.x