https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T15:22:30.426945+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-06146 bdu:2024-06146 2026-10-03T15:22:30.432539+00:00 bdu:2024-06146 https://cve.radiocsirt.org/vuln/certfr-2024-ale-010 certfr-2024-ale-010 — Le 4 août 2024, Roundcube a publié des correctifs concernant les vulnérabilités critiques CVE-2024-42008 et CVE-2024-42… 2026-10-03T15:22:30.432570+00:00 certfr-2024-ale-010 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0647 certfr-2024-avi-0647 — De multiples vulnérabilités ont été découvertes dans Roundcube. Elles permettent à un attaquant de provoquer une attein… 2026-10-03T15:22:30.432592+00:00 certfr-2024-avi-0647 https://cve.radiocsirt.org/vuln/euvd-2026-255620 EUVD-2026-255620 2026-10-03T15:22:30.432606+00:00 EUVD-2026-255620 https://cve.radiocsirt.org/vuln/fkie_cve-2024-42009 fkie_cve-2024-42009 2026-10-03T15:22:30.432617+00:00

A Cross-Site Scripting vulnerability in Roundcube through 1.5.7 and 1.6.x through 1.6.7 allows a remote attacker to steal and send emails of a victim via a crafted e-mail message that abuses a Desanitization issue in message_body() in program/actions/mail/show.php.

 https://cve.radiocsirt.org/vuln/ghsa-j43g-prf4-578j GHSA-j43g-prf4-578j 2026-10-03T15:22:30.432642+00:00

A Cross-Site Scripting vulnerability in Roundcube through 1.5.7 and 1.6.x through 1.6.7 allows a remote attacker to steal and send emails of a victim via a crafted e-mail message that abuses a Desanitization issue in message_body() in program/actions/mail/show.php.

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:0328-1 openSUSE-SU-2024:0328-1 — Security update for roundcubemail 2026-10-03T15:22:30.432657+00:00

Security update for roundcubemail

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-42009 UBUNTU-CVE-2024-42009 2026-10-03T15:22:30.432674+00:00

Affected: Ubuntu:Pro:24.04:LTS: roundcube

A Cross-Site Scripting vulnerability in Roundcube through 1.5.7 and 1.6.x through 1.6.7 allows a remote attacker to steal and send emails of a victim via a crafted e-mail message that abuses a Desanitization issue in message_body() in program/actions/mail/show.php.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1754 WID-SEC-W-2024-1754 — Roundcube: Mehrere Schwachstellen 2026-10-03T15:22:30.432692+00:00

Ein Angreifer kann mehrere Schwachstellen in Roundcube ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen und vertrauliche Informationen preiszugeben.