Product by Open Source
Roundcube Webmail
11 known vulnerabilities in Roundcube Webmail (Open Source), 0 of them actively exploited (CISA KEV).
Key figures
11
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-75002 | Roundcube Webmail: Command Injection | 7.1 | |
| High | CVE-2026-113386 | Roundcube Webmail: CRLF Injection | 7.1 | |
| High | CVE-2026-74997 | Roundcube Webmail: OS Command Injection | 8.8 | |
| High | CVE-2026-74998 | Roundcube Webmail: Cross-site Scripting | 7.2 | |
| Medium | CVE-2026-75000 | Roundcube Webmail: Incorrect Resource Transfer Between Spheres | 5.8 | |
| Medium | CVE-2026-75010 | Roundcube Webmail: Incorrect Resource Transfer Between Spheres | 6.4 | |
| Medium | CVE-2026-75006 | Roundcube Webmail: Server-Side Request Forgery (SSRF) | 5.8 | |
| Critical | CVE-2026-75003 | Roundcube Webmail: Incorrect Resource Transfer Between Spheres | 5.8 | |
| Medium | CVE-2026-74999 | Roundcube Webmail: Cross-site Scripting | 5.4 | |
| High | CVE-2026-75007 | Roundcube Webmail: Command Injection | 5.4 | |
| Medium | CVE-2026-75004 | Roundcube Webmail: Command Injection | 4.3 |