CVE-2026-72477

creationtimestamp| type| source ---|---|--- 2026-08-17 13:20:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtbs5oaq6b2y...

DEBIAN-CVE-2026-75010

In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, the modoboa driver of the password plugin could leak a Modoboa API authentication token to a user-controlled host via crafted session data. This issue only affects Roundcube instances using the password plugin with its modoboa driver...

DEBIAN-CVE-2026-75004

In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, improper rule name quoting could lead to managesievedisabledactions setting bypass via a crafted rule name in a Sieve script. This issue only affects Roundcube instances using the managesieve plugin...

DEBIAN-CVE-2026-75007

In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, the LDAP search filter was subject to injection via unescaped %u/%fu/%d substitution, which may lead to information disclosure or privilege escalation...

DEBIAN-CVE-2026-75006

In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, insufficient Cascading Style Sheets CSS sanitization in HTML e-mail messages may lead to SSRF or Information Disclosure, e.g., if stylesheet links point to local network hosts. This issue exists because of insufficient fixes for...

DEBIAN-CVE-2026-74997

In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, the cmdlearn driver of the markasjunk plugin is subject to remote code execution via crafted placeholder replacement values. This issue only affects Roundcube instances using the markasjunk plugin with its cmdlearn driver...

DEBIAN-CVE-2026-75003

In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, an unclosed url in a FuncIRI attribute of an SVG image could evade the remote image blocking, which may lead to information disclosure or privilege escalation...

DEBIAN-CVE-2026-74998

In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, responses from the CSS Cascading Style Sheets proxy were not validated, which may result in information disclosure or XSS cross-site scripting via MIME sniffing...

CGA-G972-9X54-3262

Bulletin has no description...

CVE-2026-72451

creationtimestamp| type| source ---|---|--- 2026-08-17 13:00:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtbqzuvcyb2p...

CVE-2025-38320

creationtimestamp| type| source ---|---|--- 2026-08-17 13:00:03+00:00| seen| Telegram/TEpoapSd4LQ8W2g5zD5WEHwR6GnaqJ2YMCsh0hY-jLSc6s 2026-08-18 00:00:28+00:00| seen| Telegram/TEpoapSd4LQ8W2g5zD5WEHwR6GnaqJ2YMCsh0hY-jLSc6s...

CGA-X8HQ-W44M-4FH3

Bulletin has no description...

GHSA-WCRR-JH84-FCHG

creationtimestamp| type| source ---|---|--- 2026-08-17 12:42:43+00:00| seen| https://gist.github.com/afldl/c6408059717079904adcfdaea934eb1e...

CVE-2026-74901

creationtimestamp| type| source ---|---|--- 2026-08-17 12:11:21+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtbocqolvy2f 2026-08-17 12:53:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/i5xvfncqfarns 2026-08-17 19:20:05+00:00| seen|...

CVE-2026-74900

creationtimestamp| type| source ---|---|--- 2026-08-17 12:11:12+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtbociaww725 2026-08-17 12:55:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/4xbvc346d3ke4 2026-08-17 13:48:35+00:00| seen|...

CVE-2026-74899

creationtimestamp| type| source ---|---|--- 2026-08-17 12:11:03+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtboc6pfix2e 2026-08-17 12:35:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/6sh3u5ltovdjh 2026-08-17 19:20:04+00:00| seen|...

CVE-2026-74886

creationtimestamp| type| source ---|---|--- 2026-08-17 12:09:10+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtbo6ubuuc2u 2026-08-17 18:40:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtcdzujxzl2u 2026-08-21 12:02:46+00:00| seen|...

CVE-2026-74885

creationtimestamp| type| source ---|---|--- 2026-08-17 12:08:45+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtbo64gbaf2j 2026-08-17 18:40:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtcdzt6zi52p...

CVE-2026-74880

creationtimestamp| type| source ---|---|--- 2026-08-17 12:08:20+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtbo5ecwnl2p 2026-08-17 18:30:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtcdhz5ina25 2026-08-18 04:50:04+00:00| seen|...

CVE-2026-74878

creationtimestamp| type| source ---|---|--- 2026-08-17 12:08:11+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtbo53pk4n2j 2026-08-17 18:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtcdhxaq7b25 2026-08-18 04:40:04+00:00| seen|...