https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T22:06:59.672003+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2015-02661 bdu:2015-02661 2026-10-09T22:06:59.788193+00:00 bdu:2015-02661 https://cve.radiocsirt.org/vuln/euvd-2026-108426 EUVD-2026-108426 2026-10-09T22:06:59.788232+00:00 EUVD-2026-108426 https://cve.radiocsirt.org/vuln/fkie_cve-2013-6172 fkie_cve-2013-6172 2026-10-09T22:06:59.788247+00:00

steps/utils/save_pref.inc in Roundcube webmail before 0.8.7 and 0.9.x before 0.9.5 allows remote attackers to modify configuration settings via the _session parameter, which can be leveraged to read arbitrary files, conduct SQL injection attacks, and execute arbitrary code.

 https://cve.radiocsirt.org/vuln/ghsa-pq43-cvv2-h373 GHSA-pq43-cvv2-h373 2026-10-09T22:06:59.788276+00:00

steps/utils/save_pref.inc in Roundcube webmail before 0.8.7 and 0.9.x before 0.9.5 allows remote attackers to modify configuration settings via the _session parameter, which can be leveraged to read arbitrary files, conduct SQL injection attacks, and execute arbitrary code.

 https://cve.radiocsirt.org/vuln/gsd-2013-6172 gsd-2013-6172 2026-10-09T22:06:59.788301+00:00 gsd-2013-6172 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10491-1 openSUSE-SU-2024:10491-1 — roundcubemail-1.2.3-1.1 on GA media 2026-10-09T22:06:59.788314+00:00

roundcubemail-1.2.3-1.1 on GA media

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2013-6172 Withdrawn: UBUNTU-CVE-2013-6172 2026-10-09T22:06:59.788335+00:00

Withdrawn by the publisher.

Affected: Ubuntu:14.04:LTS: roundcube

steps/utils/save_pref.inc in Roundcube webmail before 0.8.7 and 0.9.x before 0.9.5 allows remote attackers to modify configuration settings via the _session parameter, which can be leveraged to read arbitrary files, conduct SQL injection attacks, and execute arbitrary code.