Exposure of RoundCube

Webmail

120

exposure score

1,483

sites use

3

exploited

1

critical

CVEs

23 results

CVE-2025-68460HIGHRoundcube Webmail before 1.5.12 and 1.6 before 1.6.12 is prone to a information disclosure vulnerability in the HTML style sanitizer.EPSS 0.2%CVE-2026-35541MEDIUMAn issue was discovered in Roundcube Webmail before 1.5.14 and 1.6.14. Incorrect password comparison in the password plugin could lead to tyEPSS 0.2%CVE-2026-48849MEDIUMIn Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1, an unsanitized subject field in the draft restored value could lead to storEPSS 0.2%

← previouspage 2 / 2next →

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →