| CVE-2026-114732 |
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by an improper authentication vulnerability in…
|
6.8
Moyenne
|
22 oct. 2026 |
| CVE-2026-114731 |
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by an uncontrolled resource consumption vulnerability…
|
5.3
Moyenne
|
22 oct. 2026 |
| CVE-2026-114730 |
Roundcube Webmail 1.6.14 before 1.6.20 and 1.7.0 before 1.7.5 is affected by a server-side request forgery filter bypass
|
7.2
Élevée
|
22 oct. 2026 |
| CVE-2026-114729 |
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a remote content blocking bypass
|
5.3
Moyenne
|
22 oct. 2026 |
| CVE-2026-114728 |
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a remote content blocking bypass in the handling…
|
5.3
Moyenne
|
22 oct. 2026 |
| CVE-2026-114727 |
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 passes potentially unsafe content into ImageMagick when…
|
8.3
Élevée
|
22 oct. 2026 |
| CVE-2026-114726 |
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability in the…
|
5.8
Moyenne
|
22 oct. 2026 |
| CVE-2026-114725 |
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability
|
5.0
Moyenne
|
22 oct. 2026 |
| CVE-2026-114724 |
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 contains an object injection primitive in…
|
7.4
Élevée
|
22 oct. 2026 |
| CVE-2026-114723 |
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 allows the ImageMagick resource limits to be bypassed during…
|
3.7
Faible
|
22 oct. 2026 |
| CVE-2026-114722 |
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a CSS scoping bypass in HTML messages
|
6.5
Moyenne
|
22 oct. 2026 |
| CVE-2026-114721 |
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 allows the disabled_actions configuration setting to be bypassed
|
3.1
Faible
|
22 oct. 2026 |
| CVE-2026-114720 |
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by an IMAP command injection vulnerability
|
7.1
Élevée
|
22 oct. 2026 |
| CVE-2026-114719 |
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a CSRF validation bypass in the mark-as-junk…
|
3.7
Faible
|
22 oct. 2026 |
| CVE-2026-114718 |
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a cross-site scripting vulnerability in the…
|
4.7
Moyenne
|
22 oct. 2026 |
| CVE-2026-114717 |
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability when a…
|
4.0
Moyenne
|
22 oct. 2026 |
| CVE-2026-114716 |
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability
|
8.5
Élevée
|
22 oct. 2026 |
| CVE-2026-114715 |
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by an incorrect authorization vulnerability in the…
|
6.8
Moyenne
|
22 oct. 2026 |
| CVE-2026-114714 |
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a path traversal vulnerability in the…
|
5.3
Moyenne
|
22 oct. 2026 |
| CVE-2026-113386 |
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 are affected by IMAP command injection
|
7.1
Élevée
|
20 oct. 2026 |
| CVE-2026-75010 |
In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, the modoboa driver of the password plugin could leak a…
|
6.4
Moyenne
|
17 août 2026 |
| CVE-2026-75007 |
In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, the LDAP search filter was subject to injection via unescaped…
|
5.4
Moyenne
|
17 août 2026 |
| CVE-2026-75006 |
In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, insufficient Cascading Style Sheets (CSS) sanitization in…
|
5.8
Moyenne
|
17 août 2026 |
| CVE-2026-75004 |
In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, improper rule name quoting could lead to…
|
4.3
Moyenne
|
17 août 2026 |
| CVE-2026-75003 |
In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, an unclosed url() in a FuncIRI attribute of an SVG image…
|
5.8
Moyenne
|
17 août 2026 |