https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T19:28:50.600057+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-06325 bdu:2026-06325 2026-10-02T19:28:50.605281+00:00 bdu:2026-06325 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0320 certfr-2026-avi-0320 — De multiples vulnérabilités ont été découvertes dans Roundcube. Certaines d'entre elles permettent à un attaquant de pr… 2026-10-02T19:28:50.605332+00:00 certfr-2026-avi-0320 https://cve.radiocsirt.org/vuln/euvd-2026-280139 EUVD-2026-280139 2026-10-02T19:28:50.605366+00:00 EUVD-2026-280139 https://cve.radiocsirt.org/vuln/fkie_cve-2026-35545 fkie_cve-2026-35545 2026-10-02T19:28:50.605388+00:00

An issue was discovered in Roundcube Webmail before 1.5.15 and 1.6.15. The remote image blocking feature can be bypassed via SVG content in an e-mail message. This may lead to information disclosure or access-control bypass. This involves the animate element with attributeName=fill/filter/stroke.

 https://cve.radiocsirt.org/vuln/ghsa-w846-74jr-76cv GHSA-w846-74jr-76cv — Roundcube Webmail: Remote image blocking feature can be bypassed via SVG content in an e-mail message 2026-10-02T19:28:50.605432+00:00

Affected: Packagist: roundcube/roundcubemail

An issue was discovered in Roundcube Webmail before 1.5.15 and 1.6.15. The remote image blocking feature can be bypassed via SVG content in an e-mail message. This may lead to information disclosure or access-control bypass. This involves the animate element with attributeName=fill/filter/stroke.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-35545 UBUNTU-CVE-2026-35545 2026-10-02T19:28:50.605470+00:00

Affected: Ubuntu:Pro:16.04:LTS: roundcube, Ubuntu:Pro:18.04:LTS: roundcube, Ubuntu:Pro:20.04:LTS: roundcube, Ubuntu:Pro:22.04:LTS: roundcube, Ubuntu:Pro:24.04:LTS: roundcube, Ubuntu:25.10: roundcube, Ubuntu:Pro:26.04:LTS: roundcube

An issue was discovered in Roundcube Webmail before 1.5.15 and 1.6.15. The remote image blocking feature can be bypassed via SVG content in an e-mail message. This may lead to information disclosure or access-control bypass. This involves the animate element with attributeName=fill/filter/stroke.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0789 WID-SEC-W-2026-0789 — Roundcube: Mehrere Schwachstellen 2026-10-02T19:28:50.605515+00:00

Ein Angreifer kann mehrere Schwachstellen in Roundcube ausnutzen, um Dateien zu manipulieren, um Sicherheitsvorkehrungen zu umgehen, um einen Cross-Site Scripting Angriff durchzuführen, und um Informationen offenzulegen.