Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Webmail — Vulnerabilities & Security Advisories 43

All 43 CVE vulnerabilities found in Webmail, with AI-generated Chinese analysis, references, and POCs.

This page aggregates known security vulnerabilities for Webmail, a web-based email client and server suite. It focuses on common weakness enumerations such as cross-site scripting, injection flaws, and broken access control mechanisms that affect the product’s integrity and confidentiality. The collection encompasses vulnerabilities reported between 2015 and 2024, providing a comprehensive historical view of security issues affecting this software ecosystem. It includes issues ranging from critical remote code execution to low-severity information disclosures. The data is sourced from publicly available security advisories, vendor notifications, and independent researcher findings to ensure broad coverage and accuracy. Visitors can utilize this resource to track specific vendor security advisories and correlate them with known attack patterns. It allows users to understand the prevalence and impact of specific weakness classes within the Webmail environment over time. Additionally, individuals can look up a product’s vulnerability history to assess long-term security maintenance and remediation speed. This information supports risk assessment, patch management planning, and security architecture reviews by highlighting recurring security failures and trends. The structured presentation helps security professionals quickly identify potential risks associated with the deployment or use of this webmail solution without needing to consult multiple disparate sources.

Vendor: Roundcube

CVE ID Title CVSS Severity Published
CVE-2026-75010 Roundcube Webmail 权限许可和访问控制问题漏洞 CWE-669 6.4 Medium 2026-08-17
CVE-2026-75007 Roundcube Webmail 命令注入漏洞 CWE-77 5.4 Medium 2026-08-17
CVE-2026-75006 Roundcube Webmail 服务端请求伪造漏洞 CWE-918 5.8 Medium 2026-08-17
CVE-2026-75004 Roundcube Webmail 命令注入漏洞 CWE-77 4.3 Medium 2026-08-17
CVE-2026-75003 Roundcube Webmail 权限许可和访问控制问题漏洞 CWE-669 5.8 Medium 2026-08-17
CVE-2026-75002 Roundcube Webmail 命令注入漏洞 CWE-77 7.1 High 2026-08-17
CVE-2026-75000 Roundcube Webmail 权限许可和访问控制问题漏洞 CWE-669 5.8 Medium 2026-08-17
CVE-2026-74999 Roundcube Webmail 跨站脚本漏洞 CWE-79 5.4 Medium 2026-08-17
CVE-2026-74998 Roundcube Webmail 跨站脚本漏洞 CWE-79 7.2 High 2026-08-17
CVE-2026-74997 Roundcube Webmail 命令注入漏洞 CWE-78 8.8 High 2026-08-17
CVE-2026-54432 Roundcube webmail 跨站脚本漏洞 CWE-79 4.7 Medium 2026-07-14
CVE-2026-54433 Roundcube webmail 跨站脚本漏洞 CWE-79 7.2 High 2026-07-14
CVE-2026-62644 Roundcube webmail 授权问题漏洞 CWE-290 6.4 Medium 2026-07-14
CVE-2026-62643 Roundcube webmail 服务端请求伪造漏洞 CWE-918 7.2 High 2026-07-14
CVE-2026-62642 Roundcube webmail 资源管理错误漏洞 CWE-835 4.3 Medium 2026-07-14
CVE-2026-62641 Roundcube webmail 资源管理错误漏洞 CWE-770 4.3 Medium 2026-07-14
CVE-2026-48849 Roundcube Webmail 跨站脚本漏洞 CWE-79 4.4 Medium 2026-05-25
CVE-2026-48848 Roundcube Webmail 跨站脚本漏洞 CWE-79 7.2 High 2026-05-25
CVE-2026-48847 Roundcube Webmail 安全漏洞 CWE-669 3.7 Low 2026-05-25
CVE-2026-48846 Roundcube Webmail 安全漏洞 CWE-669 6.5 Medium 2026-05-25
CVE-2026-48845 Roundcube Webmail 安全漏洞 CWE-669 6.5 Medium 2026-05-25
CVE-2026-48844 Roundcube Webmail 安全漏洞 CWE-670 7.5 High 2026-05-25
CVE-2026-48843 Roundcube Webmail 代码问题漏洞 CWE-918 7.2 High 2026-05-25
CVE-2026-48842 Roundcube Webmail SQL注入漏洞 CWE-89 8.1 High 2026-05-25
CVE-2026-35391 Bulwark Webmail getClientIP() trusted client-controlled X-Forwarded-For value, enabling rate limit bypass and audit log forgery CWE-348 9.1AI Critical AI 2026-04-06
CVE-2026-35390 Content-Security-Policy was set to Report-Only mode, failing to block XSS attacks CWE-79 5.4AI Medium AI 2026-04-06
CVE-2026-35389 Bulwark Webmail S/MIME signature verification accepted self-signed certificates CWE-295 5.3AI Medium AI 2026-04-06
CVE-2026-35545 Roundcube Webmail 安全漏洞 CWE-669 5.3 Medium 2026-04-03
CVE-2026-35544 Roundcube Webmail 安全漏洞 CWE-669 5.3 Medium 2026-04-03
CVE-2026-35543 Roundcube Webmail 安全漏洞 CWE-669 5.3 Medium 2026-04-03

All 43 known CVE vulnerabilities affecting Webmail with full Chinese analysis, references, and POCs where available.