roundcube / webmail
19 known vulnerabilities in roundcube webmail.
| CVE | Priority | EPSS | CVSS | KEV | What |
|---|---|---|---|---|---|
| CVE-2026-75002 | Medium | 2.3% | 7.1 | In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, mail search and LITER… | |
| CVE-2026-74997 | Medium | 1.1% | 8.8 | In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, the cmd_learn driver … | |
| CVE-2026-74998 | Medium | 0.4% | 7.2 | In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, responses from the CS… | |
| CVE-2026-35537 | Low | 0.6% | 3.7 | An issue was discovered in Roundcube Webmail before 1.5.14 and 1.6.14. Unsafe de… | |
| CVE-2026-75003 | Low | 0.6% | 5.8 | In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, an unclosed url() in … | |
| CVE-2026-75006 | Low | 0.6% | 5.8 | In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, insufficient Cascadin… | |
| CVE-2026-35545 | Low | 0.5% | 5.3 | An issue was discovered in Roundcube Webmail before 1.5.15 and 1.6.15. The remot… | |
| CVE-2026-35542 | Low | 0.5% | 5.3 | An issue was discovered in Roundcube Webmail before 1.5.14 and 1.6.14. The remot… | |
| CVE-2026-35543 | Low | 0.5% | 5.3 | An issue was discovered in Roundcube Webmail before 1.5.14 and 1.6.14. The remot… | |
| CVE-2026-35544 | Low | 0.5% | 5.3 | An issue was discovered in Roundcube Webmail before 1.5.14 and 1.6.14. Insuffici… | |
| CVE-2026-75007 | Low | 0.5% | 5.4 | In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, the LDAP search filte… | |
| CVE-2026-75000 | Low | 0.5% | 5.8 | In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, improper HTML/CSS san… | |
| CVE-2026-35540 | Low | 0.4% | 5.4 | An issue was discovered in Roundcube Webmail 1.6.0 before 1.6.14. Insufficient C… | |
| CVE-2026-75010 | Low | 0.4% | 6.4 | In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, the modoboa driver of… | |
| CVE-2026-75004 | Low | 0.4% | 4.3 | In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, improper rule name qu… | |
| CVE-2026-35538 | Low | 0.4% | 3.1 | An issue was discovered in Roundcube Webmail before 1.5.14 and 1.6.14. Unsanitiz… | |
| CVE-2026-35539 | Low | 0.4% | 6.1 | An issue was discovered in Roundcube Webmail before 1.5.14 and 1.6.14. XSS exist… | |
| CVE-2026-35541 | Low | 0.3% | 4.2 | An issue was discovered in Roundcube Webmail before 1.5.14 and 1.6.14. Incorrect… | |
| CVE-2026-74999 | Low | 0.3% | 5.4 | In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, the "Add to address b… |