https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T20:30:50.971434+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-07448 bdu:2026-07448 2026-10-02T20:30:50.977938+00:00 bdu:2026-07448 https://cve.radiocsirt.org/vuln/euvd-2026-321289 EUVD-2026-321289 2026-10-02T20:30:50.977977+00:00 EUVD-2026-321289 https://cve.radiocsirt.org/vuln/fkie_cve-2026-48848 fkie_cve-2026-48848 2026-10-02T20:30:50.977993+00:00

Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7 has insufficient HTML sanitization that could lead to Cascading Style Sheets (CSS) injection via an SVG document that has an animate element with the attributeName attribute.

 https://cve.radiocsirt.org/vuln/ghsa-p64r-9rcj-x33x GHSA-p64r-9rcj-x33x 2026-10-02T20:30:50.978024+00:00

Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7 has insufficient HTML sanitization that could lead to Cascading Style Sheets (CSS) injection via an SVG document that has an animate element with the attributeName attribute.

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10869-1 openSUSE-SU-2026:10869-1 — roundcubemail-1.6.16-2.1 on GA media 2026-10-02T20:30:50.978040+00:00

roundcubemail-1.6.16-2.1 on GA media

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-48848 UBUNTU-CVE-2026-48848 2026-10-02T20:30:50.978062+00:00

Affected: Ubuntu:Pro:16.04:LTS: roundcube, Ubuntu:Pro:18.04:LTS: roundcube, Ubuntu:Pro:20.04:LTS: roundcube, Ubuntu:Pro:22.04:LTS: roundcube, Ubuntu:Pro:24.04:LTS: roundcube, Ubuntu:25.10: roundcube, Ubuntu:Pro:26.04:LTS: roundcube

Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7 has insufficient HTML sanitization that could lead to Cascading Style Sheets (CSS) injection via an SVG document that has an animate element with the attributeName attribute.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1671 WID-SEC-W-2026-1671 — Roundcube Webmail: Mehrere Schwachstellen 2026-10-02T20:30:50.978090+00:00

Ein Angreifer kann mehrere Schwachstellen in Roundcube Webmail ausnutzen, um SQL-Injection-Angriffe durchzuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren, vertrauliche Informationen offenzulegen, erweiterte Berechtigungen zu erlangen, beliebigen Code auszuführen oder Cross-Site-Scripting-Angriffe durchzuführen.