Tag: Roundcube

  • Hackers Exploit Critical Roundcube SQL Injection Flaw

    Hackers Exploit Critical Roundcube SQL Injection Flaw

    Attackers are exploiting a Roundcube SQL injection vulnerability that the Webmail project patched in May 2026, according to the Canadian Centre for Cyber Security. The flaw affects a plugin that connects Roundcube to a database for user lookups. Flaw Affects the virtuser_query Plugin The vulnerability, CVE-2026-48842, affects Roundcube’s built-in virtuser_query plugin. This plugin uses database…

  • Roundcube Vulnerabilities Actively Exploited After Patch Release

    Roundcube Vulnerabilities Actively Exploited After Patch Release

    Roundcube vulnerabilities are now under active exploitation, according to a recent alert from CISA. Attackers have started targeting flaws that developers already patched, proving once again that delayed updates create real risk. The warning places urgent pressure on organizations that run Roundcube Webmail in enterprise or hosting environments. Although patches became available months ago, many…