https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T01:20:07.844791+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-03414 bdu:2026-03414 2026-10-03T01:20:07.932963+00:00 bdu:2026-03414 https://cve.radiocsirt.org/vuln/certfr-2025-avi-1111 certfr-2025-avi-1111 — De multiples vulnérabilités ont été découvertes dans Roundcube. Elles permettent à un attaquant de provoquer une attein… 2026-10-03T01:20:07.932998+00:00 certfr-2025-avi-1111 https://cve.radiocsirt.org/vuln/euvd-2026-380720 EUVD-2026-380720 2026-10-03T01:20:07.933018+00:00 EUVD-2026-380720 https://cve.radiocsirt.org/vuln/fkie_cve-2025-68461 fkie_cve-2025-68461 2026-10-03T01:20:07.933030+00:00

Roundcube Webmail before 1.5.12 and 1.6 before 1.6.12 is prone to a Cross-Site-Scripting (XSS) vulnerability via the animate tag in an SVG document.

 https://cve.radiocsirt.org/vuln/ghsa-qqrg-hpxx-mmvw GHSA-qqrg-hpxx-mmvw 2026-10-03T01:20:07.933057+00:00

Roundcube Webmail before 1.5.12 and 1.6 before 1.6.12 is prone to a Cross-Site-Scripting (XSS) vulnerability via the animate tag in an SVG document.

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:20323-1 openSUSE-SU-2026:20323-1 — Security update for roundcubemail 2026-10-03T01:20:07.933072+00:00

Security update for roundcubemail

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-68461 UBUNTU-CVE-2025-68461 2026-10-03T01:20:07.933092+00:00

Affected: Ubuntu:Pro:18.04:LTS: roundcube, Ubuntu:Pro:20.04:LTS: roundcube, Ubuntu:Pro:22.04:LTS: roundcube, Ubuntu:Pro:24.04:LTS: roundcube, Ubuntu:25.10: roundcube, Ubuntu:Pro:26.04:LTS: roundcube

Roundcube Webmail before 1.5.12 and 1.6 before 1.6.12 is prone to a Cross-Site-Scripting (XSS) vulnerability via the animate tag in an SVG document.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2854 WID-SEC-W-2025-2854 — Roundcube: Mehrere Schwachstellen 2026-10-03T01:20:07.933120+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Roundcube ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen und um Informationen offenzulegen.