CVE-2026-114727

Roundcube Webmail versions before 1.6.20 and 1.7.x before 1.7.5 are vulnerable to a flaw where potentially unsafe content is passed to ImageMagick during image resizing. The application accepted SVG and EPS formats for contact photo uploads and conversions; however, both formats can reference ext...