MINI-QX68-J76W-FWXH

Bulletin has no description...

MINI-M5J6-7XPF-WH26

Bulletin has no description...

MINI-VF93-3HJ2-FR26

Bulletin has no description...

MINI-797H-8P2F-QMMH

Bulletin has no description...

MINI-P767-J6PQ-GPPP

Bulletin has no description...

MINI-525W-39V6-79VG

Bulletin has no description...

MINI-323Q-CF72-X6HH

Bulletin has no description...

MINI-5CJ2-V4VM-PQXW

Bulletin has no description...

MINI-2FCW-XX97-7QC9

Bulletin has no description...

MINI-R867-M5QX-RM97

Bulletin has no description...

MINI-9XJC-JP8C-W8GW

Bulletin has no description...

MINI-VHXJ-QR82-9H47

Bulletin has no description...

MINI-MWMG-W4CV-W8Q2

Bulletin has no description...

MINI-5GJH-J86X-CXPJ

Bulletin has no description...

MINI-7XHH-W7QM-H8WM

Bulletin has no description...

DEBIAN-CVE-2026-75010

In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, the modoboa driver of the password plugin could leak a Modoboa API authentication token to a user-controlled host via crafted session data. This issue only affects Roundcube instances using the password plugin with its modoboa driver...

DEBIAN-CVE-2026-75004

In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, improper rule name quoting could lead to managesievedisabledactions setting bypass via a crafted rule name in a Sieve script. This issue only affects Roundcube instances using the managesieve plugin...

DEBIAN-CVE-2026-75006

In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, insufficient Cascading Style Sheets CSS sanitization in HTML e-mail messages may lead to SSRF or Information Disclosure, e.g., if stylesheet links point to local network hosts. This issue exists because of insufficient fixes for...

DEBIAN-CVE-2026-74997

In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, the cmdlearn driver of the markasjunk plugin is subject to remote code execution via crafted placeholder replacement values. This issue only affects Roundcube instances using the markasjunk plugin with its cmdlearn driver...

DEBIAN-CVE-2026-75003

In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, an unclosed url in a FuncIRI attribute of an SVG image could evade the remote image blocking, which may lead to information disclosure or privilege escalation...