https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 12:08:00 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-07444 bdu:2026-07444 https://cve.radiocsirt.org/vuln/bdu:2026-07444 https://cve.radiocsirt.org/vuln/euvd-2026-321296 EUVD-2026-321296 https://cve.radiocsirt.org/vuln/euvd-2026-321296 https://cve.radiocsirt.org/vuln/fkie_cve-2026-48846 <p>In Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1, the remote image blocking feature can be bypassed via a crafted CSS var() value in an e-mail message, which may lead to information disclosure or access-control bypass.</p> <p>In Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1, the remote image blocking feature can be bypassed via a crafted CSS var() value in an e-mail message, which may lead to information disclosure or access-control bypass.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-48846 https://cve.radiocsirt.org/vuln/ghsa-xx87-33v7-6x23 <p>In Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1, the remote image blocking feature can be bypassed via a crafted CSS var() value in an e-mail message, which may lead to information disclosure or access-control bypass.</p> <p>In Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1, the remote image blocking feature can be bypassed via a crafted CSS var() value in an e-mail message, which may lead to information disclosure or access-control bypass.</p> https://cve.radiocsirt.org/vuln/ghsa-xx87-33v7-6x23 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10869-1 <p>roundcubemail-1.6.16-2.1 on GA media</p> <p>roundcubemail-1.6.16-2.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:10869-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-48846 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: roundcube, Ubuntu:Pro:18.04:LTS: roundcube, Ubuntu:Pro:20.04:LTS: roundcube, Ubuntu:Pro:22.04:LTS: roundcube, Ubuntu:Pro:24.04:LTS: roundcube, Ubuntu:25.10: roundcube, Ubuntu:Pro:26.04:LTS: roundcube</p> <p>In Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1, the remote image blocking feature can be bypassed via a crafted CSS var() value in an e-mail message, which may lead to information disclosure or access-control bypass.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: roundcube, Ubuntu:Pro:18.04:LTS: roundcube, Ubuntu:Pro:20.04:LTS: roundcube, Ubuntu:Pro:22.04:LTS: roundcube, Ubuntu:Pro:24.04:LTS: roundcube, Ubuntu:25.10: roundcube, Ubuntu:Pro:26.04:LTS: roundcube</p> <p>In Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1, the remote image blocking feature can be bypassed via a crafted CSS var() value in an e-mail message, which may lead to information disclosure or access-control bypass.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-48846 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1671 <p>Ein Angreifer kann mehrere Schwachstellen in Roundcube Webmail ausnutzen, um SQL-Injection-Angriffe durchzuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren, vertrauliche Informationen offenzulegen, erweiterte Berechtigungen zu erlangen, beliebigen Code auszuführen oder Cross-Site-Scripting-Angriffe durchzuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Roundcube Webmail ausnutzen, um SQL-Injection-Angriffe durchzuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren, vertrauliche Informationen offenzulegen, erweiterte Berechtigungen zu erlangen, beliebigen Code auszuführen oder Cross-Site-Scripting-Angriffe durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1671