Roundcube Webmail Vulnerability in Attackers’ Crosshairs
Teaser from the source
Tracked as CVE-2026-48842, the exploited bug is an SQL injection that can be exploited without authentication. The post Roundcube Webmail Vulnerability in Attackers’ Crosshairs appeared first on SecurityWeek .
This is the RSS-feed teaser. Read the full article at the original source.
Read at SecurityWeekLinked advisories
- CVE-2026-48842Roundcube Webmail: Mehrere Schwachstellen
- CVE-2026-48842Debian roundcube: security update
- CVE-2026-48842debian roundcube: SQL-Injection
- CVE-2026-48842Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1 has Pre-authentication SQL injection in the virtuser_query plugin via a preg_replace() backslash…
- CVE-2026-48842debian roundcube: SQL-Injection
Affected vendors and products
More on Crosshairs
Other news entries
- Fresh WordPress Vulnerability in Attackers’ CrosshairsNewsSecurityWeek
- CISA Adds Seven Exploited Flaws as Attackers Deploy Reverse Shells and Crypto MinersNewsThe Hacker News
- Critical Ruby on Rails Vulnerability in Attackers’ CrosshairsNewsSecurityWeek
- Critical VMware vCenter Vulnerability in Attackers’ CrosshairsNewsSecurityWeek
- Ransomware report: VPNs in the crosshairs, AI attacksNewsCSO Online
- NPM ecosystem hit with two new supply chain compromisesNewsCSO Online
- Iran's Cyber Crosshairs Focus Beyond Critical InfrastructureNewsDark Reading
- Critical Ubiquiti Vulnerabilities in Attackers’ CrosshairsNewsSecurityWeek
Source: https://www.securityweek.com/roundcube-webmail-vulnerability-in-attackers-crosshairs/
ID