#roundcube

2 articles

Security Alerts Jul 12, 2025

CVE-2025-49113: High-Risk Webmail Vulnerability (EPSS: 90%)

RoundCube Webmail contains a deserialization of untrusted data vulnerability that allows remote code execution by authenticated users because the _from parameter in a URL is not validated in program/a...

Security Alerts Jul 11, 2025

CVE-2025-68461: RoundCube Webmail Cross-site Scripting Vulnerability

RoundCube Webmail contains a cross-site scripting vulnerability via the animate tag in an SVG document....