CSIRTS // UNIFIED SECURITY ADVISORY FEEDSYS ● ONLINE · POWERED BY INTELFUSIONS.COM

CSIRTSSecurity advisory fusion

← All products & vendors

Roundcube — security advisories

17 advisories13 exploitedlatest 2026-07-10⚡ RSS feed

Tracked Roundcube products:

Roundcube Roundcube Webmail

⚡ Watch Roundcube

Get an email when a new Roundcube advisory drops — max one per day, one-click unsubscribe.

AL25-007 - Vulnerability impacting Roundcube Webmail – CVE-2025-49113 – Update 1

criticalexploitedCVE-2025-49113 CVE-2024-42009 CVE-2025-42009cccs2026-07-10

[NEW] [medium] Roundcube: Multiple vulnerabilities

mediumCVE-2026-54432 CVE-2026-54433cert-bund2026-07-07

Roundcube security advisory (AV26-657)

unknowncccs2026-07-06

Multiple vulnerabilities in Roundcube (July 6, 2026)

unknownCVE-2026-54432 CVE-2026-54433cert-fr-avis2026-07-06

CVE-2025-49113: RoundCube Webmail Deserialization of Untrusted Data Vulnerability

criticalexploitedCVE-2025-49113cisa-kev2026-02-20

CVE-2025-68461: RoundCube Webmail Cross-site Scripting Vulnerability

criticalexploitedCVE-2025-68461cisa-kev2026-02-20

CVE-2024-42009: RoundCube Webmail Cross-Site Scripting Vulnerability

criticalexploitedCVE-2024-42009cisa-kev2025-06-09

[Update] Vulnerability in Roundcube (June 5, 2025)

unknownCVE-2025-49113cert-fr-alerte2025-06-05

CVE-2024-37383: RoundCube Webmail Cross-Site Scripting (XSS) Vulnerability

criticalexploitedCVE-2024-37383cisa-kev2024-10-24

Multiple vulnerabilities in Roundcube (August 9, 2024)

unknownexploitedCVE-2024-42008 CVE-2024-42009cert-fr-alerte2024-08-09

CVE-2020-13965: Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability

criticalexploitedCVE-2020-13965cisa-kev2024-06-26

CVE-2023-43770: Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability

criticalexploitedCVE-2023-43770cisa-kev2024-02-12

CVE-2023-5631: Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability

criticalexploitedCVE-2023-5631cisa-kev2023-10-26

CVE-2020-35730: Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability

criticalexploitedCVE-2020-35730cisa-kev2023-06-22

CVE-2021-44026: Roundcube Webmail SQL Injection Vulnerability

criticalexploitedCVE-2021-44026cisa-kev2023-06-22

CVE-2020-12641: Roundcube Webmail Remote Code Execution Vulnerability

criticalexploitedCVE-2020-12641cisa-kev2023-06-22

CVE-2017-16651: Roundcube Webmail File Disclosure Vulnerability

criticalexploitedCVE-2017-16651cisa-kev2021-11-03