https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T05:22:50.384794+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2026-avi-0987 certfr-2026-avi-0987 — De multiples vulnérabilités ont été découvertes dans Roundcube. Certaines d'entre elles permettent à un attaquant de pr… 2026-10-03T05:22:50.462400+00:00 certfr-2026-avi-0987 https://cve.radiocsirt.org/vuln/euvd-2026-354303 EUVD-2026-354303 2026-10-03T05:22:50.462456+00:00 EUVD-2026-354303 https://cve.radiocsirt.org/vuln/fkie_cve-2026-74997 fkie_cve-2026-74997 2026-10-03T05:22:50.462478+00:00

In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, the cmd_learn driver of the markasjunk plugin is subject to remote code execution via crafted placeholder replacement values. This issue only affects Roundcube instances using the markasjunk plugin with its cmd_learn driver.

 https://cve.radiocsirt.org/vuln/ghsa-q5rh-mmp4-ppgq GHSA-q5rh-mmp4-ppgq 2026-10-03T05:22:50.462521+00:00

In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, the cmd_learn driver of the markasjunk plugin is subject to remote code execution via crafted placeholder replacement values. This issue only affects Roundcube instances using the markasjunk plugin with its cmd_learn driver.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-74997 UBUNTU-CVE-2026-74997 2026-10-03T05:22:50.462551+00:00

Affected: Ubuntu:Pro:16.04:LTS: roundcube, Ubuntu:Pro:18.04:LTS: roundcube, Ubuntu:Pro:20.04:LTS: roundcube, Ubuntu:Pro:22.04:LTS: roundcube, Ubuntu:Pro:24.04:LTS: roundcube, Ubuntu:Pro:26.04:LTS: roundcube

In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, the cmd_learn driver of the markasjunk plugin is subject to remote code execution via crafted placeholder replacement values. This issue only affects Roundcube instances using the markasjunk plugin with its cmd_learn driver.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2880 WID-SEC-W-2026-2880 — Roundcube Webmail: Mehrere Schwachstellen 2026-10-03T05:22:50.462603+00:00

Ein Angreifer kann mehrere Schwachstellen in Roundcube Webmail ausnutzen, um beliebigen Programmcode auszuführen, erweiterte Berechtigungen zu erlangen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren oder offenzulegen oder Cross-Site-Scripting-Angriffe durchzuführen.