Vendor
Roundcube vulnerabilities under active attack
11 Roundcube vulnerabilities have confirmed evidence of exploitation in the wild.
11
confirmed exploited
0
used in ransomware
11
past fix deadline
- CVE-2025-49113 RoundCube Webmail Deserialization of Untrusted Data Vulnerability Roundcube · Webmail
- CVE-2025-68461 RoundCube Webmail Cross-site Scripting Vulnerability Roundcube · Webmail
- CVE-2024-42009 RoundCube Webmail Cross-Site Scripting Vulnerability Roundcube · Webmail
- CVE-2024-37383 RoundCube Webmail Cross-Site Scripting (XSS) Vulnerability Roundcube · Webmail
- CVE-2020-13965 Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability Roundcube · Webmail
- CVE-2023-43770 Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability Roundcube · Webmail
- CVE-2023-5631 Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability Roundcube · Webmail
- CVE-2020-35730 Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability Roundcube · Roundcube Webmail
- CVE-2020-12641 Roundcube Webmail Remote Code Execution Vulnerability Roundcube · Roundcube Webmail
- CVE-2021-44026 Roundcube Webmail SQL Injection Vulnerability Roundcube · Roundcube Webmail
- CVE-2017-16651 Roundcube Webmail File Disclosure Vulnerability Roundcube · Roundcube Webmail