Most recent entries from all

bdu:2026-06179

2026-10-03T14:26:09.527503+00:00

bdu:2026-06179

EUVD-2026-280116

2026-10-03T14:26:09.527570+00:00

EUVD-2026-280116

fkie_cve-2026-35539

2026-10-03T14:26:09.527599+00:00

An issue was discovered in Roundcube Webmail before 1.5.14 and 1.6.14. XSS exists because of insufficient HTML attachment sanitization in preview mode. A victim must preview a text/html attachment.

GHSA-x4q5-8j5g-hpjc — Roundcube Webmail: Insufficient HTML attachment sanitization in preview mode

2026-10-03T14:26:09.527632+00:00

Affected: Packagist: roundcube/roundcubemail

An issue was discovered in Roundcube Webmail before 1.5.14 and 1.6.14. XSS exists because of insufficient HTML attachment sanitization in preview mode. A victim must preview a text/html attachment.

UBUNTU-CVE-2026-35539

2026-10-03T14:26:09.527656+00:00

Affected: Ubuntu:Pro:16.04:LTS: roundcube, Ubuntu:Pro:18.04:LTS: roundcube, Ubuntu:Pro:20.04:LTS: roundcube, Ubuntu:Pro:22.04:LTS: roundcube, Ubuntu:Pro:24.04:LTS: roundcube, Ubuntu:25.10: roundcube, Ubuntu:Pro:26.04:LTS: roundcube

An issue was discovered in Roundcube Webmail before 1.5.14 and 1.6.14. XSS exists because of insufficient HTML attachment sanitization in preview mode. A victim must preview a text/html attachment.

WID-SEC-W-2026-0789 — Roundcube: Mehrere Schwachstellen

2026-10-03T14:26:09.527685+00:00

Ein Angreifer kann mehrere Schwachstellen in Roundcube ausnutzen, um Dateien zu manipulieren, um Sicherheitsvorkehrungen zu umgehen, um einen Cross-Site Scripting Angriff durchzuführen, und um Informationen offenzulegen.