Roundcube: Mehrere Schwachstellen
NEOSEC enrichment — no mirror of the original source
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Roundcube ausnutzen, um Sicherheitsvorkehrungen zu umgehen Informationen offenzulegen und zu Manipulieren und einen Cross Site Scripting Angriff durchzuführen.
Source: BSI CERT-Bund. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Read the issue at BSI CERT-BundFull advisory
Highbsi:WID-SEC-2026-32310 linked CVEs
Open advisory with all CVEs
More on Roundcube
Other advisories
- CriticalCVE-2026-54432Roundcube: Mehrere Schwachstellen
- HighCVE-2026-75000Roundcube Webmail: Mehrere Schwachstellen
- Not ratedosv:openSUSE-SU-2026:22195-1Security update for roundcubemail
- MediumCVE-2026-107147The twofactor_gauthenticator plugin for Roundcube is vulnerable to 2fa authentication bypass by spoofed client address headers. Due to the lack of validation…
- MediumCVE-2026-107146The twofactor_gauthenticator plugin for Roundcube is vulnerable to session persistence after failed 2FA verification. Due to the lack of server-side session …
- MediumCVE-2026-107145The twofactor_gauthenticator plugin for Roundcube is vulnerable to brute-forcing of the second-factor code. Due to the lack of rate limiting, an attacker who…
- HighCVE-2026-113386Roundcube Webmail: Mehrere Schwachstellen
- Not ratedosv:MGASA-2026-0532Updated roundcubemail package fixes security vulnerabilities
Other news entries
- Roundcube Webmail: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- Roundcube Webmail: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- Multiples vulnérabilités dans Roundcube Webmail (19 octobre 2026)NewsCERT-FR (ANSSI)
- Roundcube Pre-Auth SQL Injection Flaw Actively Exploited in the WildNewsThe Hacker News
- Roundcube Webmail Vulnerability in Attackers’ CrosshairsNewsSecurityWeek
- Hackers now exploit critical Roundcube flaw in code injection attacksNewsBleepingComputer
- Multiples vulnérabilités dans Roundcube Webmail (07 septembre 2026)NewsCERT-FR (ANSSI)
- Roundcube Webmail: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
Source: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3231
ID