Roundcube — security advisories

24 advisories14 exploitedlatest 2026-08-18⚡ RSS feed

Tracked Roundcube products:

Roundcube Roundcube Webmail

⚡ Watch Roundcube

Get an email when a new Roundcube advisory drops — max one per day, one-click unsubscribe.

[NEW] [high] Roundcube Webmail: Multiple vulnerabilities

highCVE-2026-74997 CVE-2026-74998 CVE-2026-74999 CVE-2026-75000cert-bund2026-08-18

Roundcube security advisory (AV26-793)

unknowncccs2026-08-10

Multiple vulnerabilities in Roundcube (August 10, 2026)

unknowncert-fr-avis2026-08-10

[NEW] [medium] Roundcube: Multiple vulnerabilities

mediumCVE-2026-54432 CVE-2026-54433cert-bund2026-08-06

[UPDATE] [high] Roundcube Webmail: Multiple vulnerabilities

highCVE-2026-48842 CVE-2026-48843 CVE-2026-48845 CVE-2026-48846cert-bund2026-07-22

[UPDATE] [medium] Roundcube: Multiple vulnerabilities

mediumCVE-2026-35537 CVE-2026-35538 CVE-2026-35539 CVE-2026-35540cert-bund2026-07-22

DSA-6391-1 roundcube - security update

unknownCVE-2026-54432 CVE-2026-54433 CVE-2026-62641 CVE-2026-62642debian2026-07-19

AL25-007 - Vulnerability impacting Roundcube Webmail – CVE-2025-49113 – Update 1

criticalexploitedCVE-2025-49113 CVE-2024-42009 CVE-2025-42009cccs2026-07-10

Roundcube security advisory (AV26-657)

unknowncccs2026-07-06

Multiple vulnerabilities in Roundcube (July 6, 2026)

unknownCVE-2026-54432 CVE-2026-54433cert-fr-avis2026-07-06

Multiple vulnerabilities in Roundcube (March 19, 2026)

unknownCVE-2026-35537 CVE-2026-35545 CVE-2026-35544cert-fr-avis2026-03-19

CVE-2025-68461: RoundCube Webmail Cross-site Scripting Vulnerability

criticalexploitedCVE-2025-68461cisa-kev2026-02-20

CVE-2025-49113: RoundCube Webmail Deserialization of Untrusted Data Vulnerability

criticalexploitedCVE-2025-49113cisa-kev2026-02-20

CVE-2024-42009: RoundCube Webmail Cross-Site Scripting Vulnerability

criticalexploitedCVE-2024-42009cisa-kev2025-06-09

[Update] Vulnerability in Roundcube (June 5, 2025)

unknownexploitedCVE-2025-49113cert-fr-alerte2025-06-05

CVE-2024-37383: RoundCube Webmail Cross-Site Scripting (XSS) Vulnerability

criticalexploitedCVE-2024-37383cisa-kev2024-10-24

Multiple vulnerabilities in Roundcube (August 9, 2024)

unknownexploitedCVE-2024-42008 CVE-2024-42009cert-fr-alerte2024-08-09

CVE-2020-13965: Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability

criticalexploitedCVE-2020-13965cisa-kev2024-06-26

CVE-2023-43770: Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability

criticalexploitedCVE-2023-43770cisa-kev2024-02-12

CVE-2023-5631: Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability

criticalexploitedCVE-2023-5631cisa-kev2023-10-26

CVE-2020-35730: Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability

criticalexploitedCVE-2020-35730cisa-kev2023-06-22

CVE-2021-44026: Roundcube Webmail SQL Injection Vulnerability

criticalexploitedCVE-2021-44026cisa-kev2023-06-22

CVE-2020-12641: Roundcube Webmail Remote Code Execution Vulnerability

criticalexploitedCVE-2020-12641cisa-kev2023-06-22

CVE-2017-16651: Roundcube Webmail File Disclosure Vulnerability

criticalexploitedCVE-2017-16651cisa-kev2021-11-03