Skip to content

PatchFirst · Latest vulnerabilities

roundcube vulnerabilities

Vulnerabilities published for roundcube in the last 30 days: 0. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗

Vulnerabilities: 2

CVE-2021-26925
Medium · CVSS 5.4EPSS 1.01%Fix available
CVE-2021-26925
Roundcube before 1.4.11 allows XSS via crafted Cascading Style Sheets (CSS) token sequences during HTML email rendering.
roundcube Operating systems
- Update to 1.5.0+dfsg.1-2
Published February 9, 2021Updated August 3, 2024
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2019-15237
High · CVSS 7.4EPSS 1.03%Fix available
CVE-2019-15237
Roundcube Webmail through 1.3.9 mishandles Punycode xn-- domain names, leading to homograph attacks.
roundcube Operating systems
- Update to 1.5.0+dfsg.1-2
Published August 20, 2019Updated August 5, 2024
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →