Debian dsa-6545 : roundcube - security update

The remote Debian 13 host has packages installed that are affected by a vulnerability as referenced in the dsa-6545 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6545-1 [email protected] https://www.debian.org/security/...

[SECURITY] [DLA 4823-1] roundcube security update

Debian LTS Advisory DLA-4823-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin October 05, 2026 https://wiki.debian.org/LTS Package : roundcube Version : 1.6.5+dfsg-1+deb12u12 CVE ID : not yet available Debian Bug : 1146838 Multiple vulnerabilities were discovered ...

Debian dla-4823 : roundcube - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4823 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4823-1 [email protected]...

Exploit for CVE-2026-48842

POC-CVE-2...

roundcube-cve-2025-49113

Install docker run --name ubuntu24 \ -p 9876:80 \ -v "$PWD/rcinstall.sh":/root/rcinstall.sh \ -it ubuntu:24.04 \ bash -c "chmod +x /root/rcinstall.sh && /root/rcinstall.sh && exec bash" POC Youtube Follow me @Linkdin Credit @ fearsoff-org...

Exploit for CVE-2026-48842

CVE-2026-48842 PoC — Roundcube virtuserquery pre-auth SQLi...

Roundcube Pre-Auth SQL Injection Flaw Actively Exploited in the Wild

The Canadian Centre for Cyber Security has warned that a now-patched Roundcube Webmail vulnerability is being actively exploited in the wild. The vulnerability in question is CVE-2026-48842 CVSS score: 8.1, a pre-authentication SQL injection in the virtuserquery plugin of Roundcube Webmail versio...

Exploit for CVE-2026-48842

CVE-2026-48842 — Roundcube virtuserquery pre-auth SQLi Pytho...

VulnCheck KEV: CVE-2026-48842

Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1 has Pre-authentication SQL injection in the virtuserquery plugin via a pregreplace backslash escape bypass...

[SECURITY] Fedora 43 Update: roundcubemail-1.6.19-1.fc43

RoundCube Webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking. RoundCube Webmail is written in...

[SECURITY] Fedora 44 Update: roundcubemail-1.7.4-1.fc44

RoundCube Webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking. RoundCube Webmail is written in...

Fedora 44 : roundcubemail (2026-38c637be37)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-38c637be37 advisory. Release 1.7.4 - Use X-Content-Type-Options:nosniff for attachment previews and downloads 10308 - zipdownload: Fix attachment filename sanitisation of backsla...

Fedora 45 : roundcubemail (2026-6ab831c1c5)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-6ab831c1c5 advisory. Release 1.7.4 - Use X-Content-Type-Options:nosniff for attachment previews and downloads 10308 - zipdownload: Fix attachment filename sanitisation of backsla...

Scary_POCs

CVE-2026-48842 - Roundcube Webmail SQL Injection PoC Fil...

RoundCube Loop DoS

The vulnerability of the RoundCube Webmail email client is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability could allow a malicious actor to cause service failures...

RoundCube SSRF

The vulnerability of the RoundCube Webmail email client is related to insufficient validation of requests at the server side. Exploiting this vulnerability allows a malicious actor to perform an SSRF attack remotely...

RoundCube Webmail DoS

The vulnerability of the RoundCube Webmail email client is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...

RoundCube Webmail Authentication Bypass

The vulnerability of the RoundCube Webmail email client relates to the ability to bypass authentication through spamming. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information...

Roundcube -- Multiple vulnerabilities

The Roundcube project reports: CSS declaration smuggling via un-encoded ampersand emission CSS property injection via body background attribute email header injection via bare CR in the subject field email header injection via C-escape \r in the recipient display name email header injection via...

FreeBSD : Roundcube -- Multiple vulnerabilities (e7726f5e-a9d0-11f1-93c7-8447094a420f)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the e7726f5e-a9d0-11f1-93c7-8447094a420f advisory. The Roundcube project reports: Tenable has extracted the preceding description block directly from the...