CVE-2026-75003: Incorrect Resource Transfer Between Spheres

In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, an unclosed url in a FuncIRI attribute of an SVG image could evade the remote image blocking, which may lead to information disclosure or privilege escalation...

PT-2026-76640

Name of the Vulnerable Software and Affected Versions Roundcube Webmail versions prior to 1.6.18 Roundcube Webmail versions 1.7.x prior to 1.7.3 Description The "Add to address book" action is subject to stored Cross-Site Scripting XSS, a flaw where malicious scripts are permanently stored on the...

Exploit for Cross-site Scripting in Roundcube Webmail

CVE-2026-54433: Roundcube plain-text email stored XSS !Explo...

Updated roundcubemail packages fix security vulnerabilities

Add basic validation for content proxied by the css proxy Fix SSRF bypass via specific local address URLs using 100.64.0.0/10 and fe80::/10 nets, Fix SSRF filter bypass via various forms of nip.io/sslip.io hostnames evading islocalurl check Fix remote content blocking bypass via unclosed url in a...

PT-2026-80574

Updated roundcubemail to the 1.6.17 version to fix security vulnerabilities: Some XSS and DoS errors have been corrected. Various vulnerabilities in the password plugin have been fixed. An infinite loop has been fixed...

FreeBSD : Roundcube -- Multiple vulnerabilities (54d19b85-93d4-11f1-8144-8447094a420f)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 54d19b85-93d4-11f1-8144-8447094a420f advisory. The Roundcube project reports: Tenable has extracted the preceding description block directly from the...

Roundcube -- Multiple vulnerabilities

The Roundcube project reports: Missing basic validation for content proxied by the css proxy SSRF bypass via specific local address URLs using 100.64.0.0/10 and fe80::/10 nets SSRF filter bypass via various forms of nip.io/sslip.io hostnames evading islocalurl check remote content blocking bypass...

Nextcloud: Persistent SMTP header injection via identity `organization` / `name`

A vulnerability was discovered in the Roundcube webmail client that allowed persistent SMTP header injection through the identity organization and name fields. The vulnerability was caused by insufficient validation of the user-supplied input, which resulted in the unfiltered data being stored an...

Nextcloud: SMTP header injection via C-escape `\r` in the recipient display name

A vulnerability was discovered in Roundcube's email handling where authenticated users could inject arbitrary SMTP headers through the recipient display name field. The issue occurred because the application stripped carriage return and line feed characters before applying a function that convert...

Roundcube Webmail - Cross-Site Scripting Detection

A Cross-Site Scripting vulnerability in Roundcube through 1.5.7 and 1.6.x through 1.6.7 allows a remote attacker to steal and send emails of a victim via a crafted e-mail message that abuses a Desanitization issue in messagebody in program/actions/mail/show.php. !/usr/bin/env python3 -- coding:...

Roundcube Webmail Installer - Exposure Detection

Detects exposure of the Roundcube Webmail installer interface. Public access to this installer may allow attackers to reconfigure the webmail application, potentially leading to email account compromise or the disclosure of sensitive configuration details. !/usr/bin/env python3 -- coding: utf-8 -...

Roundcube webmail Detection

Detects Roundcube webmail. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Roundcube webmail.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Roundcube webmail Detection', 'description': 'Detects...

[SECURITY] [DLA 4693-1] roundcube security update

Debian LTS Advisory DLA-4693-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin July 22, 2026 https://wiki.debian.org/LTS Package : roundcube Version : 1.4.15+dfsg.1-1+deb11u10 1.6.5+dfsg-1+deb12u10 CVE ID : CVE-2026-54432 CVE-2026-54433 CVE-2026-62641 CVE-2026-6264...

Debian dla-4693 : roundcube - security update

The remote Debian 11 / 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4693 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4693-1 [email protected]...

Debian dsa-6391 : roundcube - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6391 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6391-1 [email protected] https://www.debian.org/securit...

[SECURITY] [DSA 6391-1] roundcube security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6391-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 19, 2026 https://www.debian.org/security/faq -...

[SECURITY] Fedora 43 Update: roundcubemail-1.6.17-1.fc43

RoundCube Webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking. RoundCube Webmail is written in...

[SECURITY] Fedora 44 Update: roundcubemail-1.7.2-1.fc44

RoundCube Webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking. RoundCube Webmail is written in...

Fedora 44 : roundcubemail (2026-517daa8d64)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-517daa8d64 advisory. Release 1.7.2 - Add HEAD request handler to the static.php - Fix so the oauthpasswordclaim claim is retrieved via token or userinfo request 9631 - F...

Linux Distros Unpatched Vulnerability : CVE-2026-62642

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, an infinite loop was discovered in the TNEF decoder, which may lead to denial of service upon opening...