https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T20:01:18.234686+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-14386 bdu:2026-14386 2026-10-03T20:01:18.329184+00:00 bdu:2026-14386 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0835 certfr-2026-avi-0835 — De multiples vulnérabilités ont été découvertes dans Roundcube. Certaines d'entre elles permettent à un attaquant de pr… 2026-10-03T20:01:18.329219+00:00 certfr-2026-avi-0835 https://cve.radiocsirt.org/vuln/euvd-2026-336633 EUVD-2026-336633 2026-10-03T20:01:18.329238+00:00 EUVD-2026-336633 https://cve.radiocsirt.org/vuln/fkie_cve-2026-62642 fkie_cve-2026-62642 2026-10-03T20:01:18.329250+00:00

In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, an infinite loop was discovered in the TNEF decoder, which may lead to denial of service upon opening an email with a TNEF attachment.

 https://cve.radiocsirt.org/vuln/ghsa-345h-r9m2-jr4p GHSA-345h-r9m2-jr4p 2026-10-03T20:01:18.329277+00:00

In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, an infinite loop was discovered in the TNEF decoder, which may lead to denial of service upon opening an email with a TNEF attachment.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-62642 UBUNTU-CVE-2026-62642 2026-10-03T20:01:18.329293+00:00

Affected: Ubuntu:Pro:16.04:LTS: roundcube, Ubuntu:Pro:18.04:LTS: roundcube, Ubuntu:Pro:20.04:LTS: roundcube, Ubuntu:Pro:22.04:LTS: roundcube, Ubuntu:Pro:24.04:LTS: roundcube, Ubuntu:Pro:26.04:LTS: roundcube

In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, an infinite loop was discovered in the TNEF decoder, which may lead to denial of service upon opening an email with a TNEF attachment.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2207 WID-SEC-W-2026-2207 — Roundcube: Mehrere Schwachstellen 2026-10-03T20:01:18.329320+00:00

Ein Angreifer kann mehrere Schwachstellen in Roundcube ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Denial-of-Service-Angriffe zu verursachen, Cross-Site-Scripting-Angriffe durchzuführen sowie Daten zu manipulieren oder offenzulegen.