As cited
Copy frozen at (site build).
vulnerabilities
Roundcube security advisory (AV26-503) – Update 1
Roundcube published security advisories on May 25, 2026, to address vulnerabilities in Webmail versions prior to 1.6.16 and 1.7.1. An update on September 21, 2026, confirmed that CVE-2026-48842 is being actively exploited in the wild, prompting the Cyber Centre to recommend immediate patching.
Why it matters: Organizations running Roundcube Webmail must update to version 1.6.16 or 1.7.1 immediately, as CVE-2026-48842 is under active exploitation.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
Roundcube security advisory (AV26-503) – Update 1
Roundcube published security advisories on May 25, 2026, addressing vulnerabilities in Webmail versions prior to 1.6.16 and 1.7.1. CVE-2026-48842 (CVSS 8.1) is reported to be exploited in the wild, prompting users and administrators to apply available updates.
Why it matters: Organizations running Roundcube Webmail before versions 1.6.16 or 1.7.1 face active exploitation of CVE-2026-48842 and must patch immediately to prevent compromise.
- Source published
- First seen by Cybersecurity Tracker