Skip to content
Threat Feed
Subscribe

Product

Roundcube Webmail < 1.7.2

1 brief RSS
high advisory

Multiple Vulnerabilities in Roundcube Webmail (CVE-2026-54432, CVE-2026-54433)

Multiple vulnerabilities, including Server-Side Request Forgery (SSRF), Cross-Site Scripting (XSS), and Denial of Service (DoS), have been discovered in Roundcube Webmail versions 1.6.x prior to 1.6.17 and 1.7.x prior to 1.7.2, allowing remote attackers to impact service availability and potentially execute malicious code or access internal resources.

Roundcube Webmail < 1.6.17 +1 webmail vulnerability ssrf xss dos web-application