| CVE-2026-35540 |
An issue was discovered in Roundcube Webmail 1.6.0 before 1.6.14
|
5.4
Moyenne
|
3 avr. 2026 |
| CVE-2026-35539 |
An issue was discovered in Roundcube Webmail before 1.5.14 and 1.6.14
|
6.1
Moyenne
|
3 avr. 2026 |
| CVE-2026-35538 |
An issue was discovered in Roundcube Webmail before 1.5.14 and 1.6.14
|
3.1
Faible
|
3 avr. 2026 |
| CVE-2026-35537 |
An issue was discovered in Roundcube Webmail before 1.5.14 and 1.6.14
|
3.7
Faible
|
3 avr. 2026 |
| CVE-2026-26079 |
Roundcube Webmail before 1.5.13 and 1.6 before 1.6.13 allows Cascading Style Sheets (CSS) injection, e.g., because…
|
4.7
Moyenne
|
11 févr. 2026 |
| CVE-2026-25916 |
Roundcube Webmail before 1.5.13 and 1.6 before 1.6.13, when "Block remote images" is used, does not block SVG feImage
|
4.3
Moyenne
|
9 févr. 2026 |
| CVE-2025-68461 |
Exploitée
RoundCube Webmail Cross-site Scripting Vulnerability
|
7.2
Élevée
|
18 déc. 2025 |
| CVE-2025-68460 |
Roundcube Webmail before 1.5.12 and 1.6 before 1.6.12 is prone to a information disclosure vulnerability in the HTML…
|
7.2
Élevée
|
18 déc. 2025 |
| CVE-2025-49113 |
Exploitée
RoundCube Webmail Deserialization of Untrusted Data Vulnerability
|
9.9
Critique
|
2 juin 2025 |
| CVE-2024-37383 |
Exploitée
RoundCube Webmail Cross-Site Scripting (XSS) Vulnerability
|
6.1
Moyenne
|
7 juin 2024 |
| CVE-2023-43770 |
Exploitée
Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability
|
6.1
Moyenne
|
22 sept. 2023 |
| CVE-2020-13965 |
Exploitée
Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability
|
6.3
Moyenne
|
9 juin 2020 |