Aller au contenu
Se connecter
7.1 Élevée

CVE-2026-75002 In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, mail search and LITERAL+ byte-count desynchronization could…

Description

In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, mail search and LITERAL+ byte-count desynchronization could lead to information disclosure or privilege escalation via IMAP command injection.

Produits et versions touchés

Produit Versions touchées Corrigé en
Webmail 1.7 1.7.0 → < 1.7.3 1.7.3
Webmail 1.6 1.6.0 → < 1.6.18 1.6.18

Autres CVE de Webmail

Les 62 CVE de Webmail →
CVE-2026-114732 Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by an improper authentication vulnerability in… 6.8 Moyenne CVE-2026-114731 Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by an uncontrolled resource consumption vulnerability… 5.3 Moyenne CVE-2026-114730 Roundcube Webmail 1.6.14 before 1.6.20 and 1.7.0 before 1.7.5 is affected by a server-side request forgery filter bypass 7.2 Élevée CVE-2026-114729 Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a remote content blocking bypass 5.3 Moyenne
Suivre cette CVE