Skip to content
Threat Feed
Subscribe

Product

Roundcube Webmail

2 briefs RSS
critical advisory

Multiple Vulnerabilities in Roundcube Webmail

Multiple vulnerabilities in Roundcube Webmail allow an attacker to perform SQL injection attacks, bypass security measures, manipulate data, disclose confidential information, obtain extended privileges, execute arbitrary code, or perform cross-site scripting attacks.

Roundcube Webmail roundcube webmail vulnerability sqli xss code execution
2r 3t
high threat

APT28 Targeting Roundcube Webmail in Ukraine

APT28 (Fancy Bear) is actively targeting Roundcube webmail platforms to compromise government and defense email accounts, leveraging Roundcube's vulnerabilities and widespread use, primarily targeting Ukrainian entities in an activity tracked as Operation Roundish.

Roundcube Webmail APT28 +6 roundcube webmail ukraine exploitation
2r 3t