https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T12:06:00.656574+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-07446 bdu:2026-07446 2026-10-02T12:06:00.750141+00:00 bdu:2026-07446 https://cve.radiocsirt.org/vuln/euvd-2026-321280 EUVD-2026-321280 2026-10-02T12:06:00.750214+00:00 EUVD-2026-321280 https://cve.radiocsirt.org/vuln/fkie_cve-2026-48844 fkie_cve-2026-48844 2026-10-02T12:06:00.750244+00:00

Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1 has insecure code evaluation logic in LDAP the autovalues option that could lead to code injection. (Support for code evaluation has been removed in 1.6.16 and 1.7.1.)

 https://cve.radiocsirt.org/vuln/ghsa-qhxr-pc4x-jrq3 GHSA-qhxr-pc4x-jrq3 2026-10-02T12:06:00.750273+00:00

Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1 has insecure code evaluation logic in LDAP the autovalues option that could lead to code injection. (Support for code evaluation has been removed in 1.6.16 and 1.7.1.)

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10869-1 openSUSE-SU-2026:10869-1 — roundcubemail-1.6.16-2.1 on GA media 2026-10-02T12:06:00.750288+00:00

roundcubemail-1.6.16-2.1 on GA media

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-48844 UBUNTU-CVE-2026-48844 2026-10-02T12:06:00.750310+00:00

Affected: Ubuntu:Pro:16.04:LTS: roundcube, Ubuntu:Pro:18.04:LTS: roundcube, Ubuntu:Pro:20.04:LTS: roundcube, Ubuntu:Pro:22.04:LTS: roundcube, Ubuntu:Pro:24.04:LTS: roundcube, Ubuntu:25.10: roundcube, Ubuntu:Pro:26.04:LTS: roundcube

Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1 has insecure code evaluation logic in LDAP the autovalues option that could lead to code injection. (Support for code evaluation has been removed in 1.6.16 and 1.7.1.)

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1671 WID-SEC-W-2026-1671 — Roundcube Webmail: Mehrere Schwachstellen 2026-10-02T12:06:00.750339+00:00

Ein Angreifer kann mehrere Schwachstellen in Roundcube Webmail ausnutzen, um SQL-Injection-Angriffe durchzuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren, vertrauliche Informationen offenzulegen, erweiterte Berechtigungen zu erlangen, beliebigen Code auszuführen oder Cross-Site-Scripting-Angriffe durchzuführen.