CVE-2026-114728

Roundcube Webmail versions prior to 1.6.20 and 1.7.x before 1.7.5 are vulnerable to a remote content blocking bypass within the handling of FuncIRI attributes . The rcube_washtml function failed to recognize certain CSS escape sequences (e.g., \000075rl( or u\72 l() when detecting the url() token...

EUVD-2026-107706

Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a remote content blocking bypass in the handling of FuncIRI attributes. rcubewashtml detected the CSS url token with a pattern that enumerated only some of its escaped spellings, so values using other CSS escape sequences, for...