Roundcube Webmail Security Update: Fixes XSS, SQLi, SSRF, and RCE

roundcube.net 2026-05-26 查看中文 →

Security Advisory Critical Roundcube

Affected:

Roundcube Webmail 1.6
Roundcube Webmail 1.7

Fixed in:

1.6.16
1.7.1

Referenced CVEs: CVE-2026-48849 · 4.4 CVE-2026-48848 · 7.2 CVE-2026-48847 · 3.7 CVE-2026-48846 · 6.5 CVE-2026-48845 · 6.5 CVE-2026-48844 · 7.5 CVE-2026-48843 · 7.2 CVE-2026-48842 · 8.1

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from roundcube.net, cleaned by our LLM pipeline, and translated to English. View original.

Goal Reached Thanks to every supporter — we hit 100%!

Roundcube Webmail Security Update: Fixes XSS, SQLi, SSRF, and RCE