CVE-2026-114725

A flaw was found in Roundcube Webmail. The application fails to properly sanitize newline characters in specific email header fields, including References, In-Reply-To, Message-ID, and From parameters. A remote authenticated attacker can exploit this vulnerability to inject arbitrary headers into...

Improper Interceptor Addition

Spring Cloud Stream is vulnerable to improper interceptor addition. The vulnerability is due to an improperly added PartitionInterceptor while sending a message, where the interceptor is attached without adequate validation and attackers can send crafted messages to manipulate message routing or...