Skip to content

Known vulnerabilities in Roundcube Webmail

Is your version affected?

CVE Summary Score Published
CVE-2025-68461 Exploited RoundCube Webmail Cross-site Scripting Vulnerability 7.2 High Dec 18, 2025
CVE-2025-49113 Exploited RoundCube Webmail Deserialization of Untrusted Data Vulnerability 9.9 Critical Jun 2, 2025
CVE-2024-37383 Exploited RoundCube Webmail Cross-Site Scripting (XSS) Vulnerability 6.1 Medium Jun 7, 2024
CVE-2023-43770 Exploited Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability 6.1 Medium Sep 22, 2023
CVE-2020-13965 Exploited Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability 6.3 Medium Jun 9, 2020

Other Roundcube products