https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T22:28:41.905292+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-06181 bdu:2026-06181 2026-10-02T22:28:41.913557+00:00 bdu:2026-06181 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0320 certfr-2026-avi-0320 — De multiples vulnérabilités ont été découvertes dans Roundcube. Certaines d'entre elles permettent à un attaquant de pr… 2026-10-02T22:28:41.913610+00:00 certfr-2026-avi-0320 https://cve.radiocsirt.org/vuln/euvd-2026-290521 EUVD-2026-290521 2026-10-02T22:28:41.913643+00:00 EUVD-2026-290521 https://cve.radiocsirt.org/vuln/fkie_cve-2026-35537 fkie_cve-2026-35537 2026-10-02T22:28:41.913669+00:00

An issue was discovered in Roundcube Webmail before 1.5.14 and 1.6.14. Unsafe deserialization in the redis/memcache session handler may lead to arbitrary file write operations by unauthenticated attackers via crafted session data.

 https://cve.radiocsirt.org/vuln/ghsa-rxj3-rrwm-pj4r GHSA-rxj3-rrwm-pj4r — Roundcube Webmail: Unsafe deserialization in the redis/memcache session handler 2026-10-02T22:28:41.913715+00:00

Affected: Packagist: roundcube/roundcubemail

An issue was discovered in Roundcube Webmail before 1.5.14 and 1.6.14. Unsafe deserialization in the redis/memcache session handler may lead to arbitrary file write operations by unauthenticated attackers via crafted session data.

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:20586-1 openSUSE-SU-2026:20586-1 — Security update for roundcubemail 2026-10-02T22:28:41.913755+00:00

Security update for roundcubemail

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-35537 UBUNTU-CVE-2026-35537 2026-10-02T22:28:41.913785+00:00

Affected: Ubuntu:Pro:16.04:LTS: roundcube, Ubuntu:Pro:18.04:LTS: roundcube, Ubuntu:Pro:20.04:LTS: roundcube, Ubuntu:Pro:22.04:LTS: roundcube, Ubuntu:Pro:24.04:LTS: roundcube, Ubuntu:25.10: roundcube, Ubuntu:Pro:26.04:LTS: roundcube

An issue was discovered in Roundcube Webmail before 1.5.14 and 1.6.14. Unsafe deserialization in the redis/memcache session handler may lead to arbitrary file write operations by unauthenticated attackers via crafted session data.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0789 WID-SEC-W-2026-0789 — Roundcube: Mehrere Schwachstellen 2026-10-02T22:28:41.913833+00:00

Ein Angreifer kann mehrere Schwachstellen in Roundcube ausnutzen, um Dateien zu manipulieren, um Sicherheitsvorkehrungen zu umgehen, um einen Cross-Site Scripting Angriff durchzuführen, und um Informationen offenzulegen.