CVE-2026-114721

A flaw was found in Roundcube Webmail. This vulnerability allows a remote authenticated attacker to bypass restrictions configured to disable specific actions. Because the application evaluates the requested action name directly without checking alternative names, an attacker can access prohibite...