<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: roundcube-webmail</title><description>Every new CVE for roundcube-webmail.</description><link>https://agentprime.io/</link><item><title>CVE-2026-114732: Authentication bypass in Roundcube Webmail</title><link>https://agentprime.io/advisories/CVE-2026-114732/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-114732/</guid><description>CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 22 Oct 2026 02:16:51 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-114731: Resource allocation without limits in Roundcube Webmail</title><link>https://agentprime.io/advisories/CVE-2026-114731/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-114731/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 22 Oct 2026 02:12:34 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-114730: Server-side request forgery in Roundcube Webmail</title><link>https://agentprime.io/advisories/CVE-2026-114730/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-114730/</guid><description>CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 22 Oct 2026 02:09:40 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-114729: Roundcube Webmail: Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a remote content…</title><link>https://agentprime.io/advisories/CVE-2026-114729/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-114729/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 22 Oct 2026 02:05:39 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-114728: Roundcube Webmail: Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a remote content…</title><link>https://agentprime.io/advisories/CVE-2026-114728/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-114728/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 22 Oct 2026 02:02:49 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-114727: Roundcube Webmail: Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 passes potentially unsafe content…</title><link>https://agentprime.io/advisories/CVE-2026-114727/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-114727/</guid><description>CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 22 Oct 2026 01:59:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-114726: Roundcube Webmail: Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header…</title><link>https://agentprime.io/advisories/CVE-2026-114726/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-114726/</guid><description>CVSS 5.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 22 Oct 2026 01:55:25 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-114725: Roundcube Webmail: Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header…</title><link>https://agentprime.io/advisories/CVE-2026-114725/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-114725/</guid><description>CVSS 5.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 22 Oct 2026 01:52:10 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-114724: Deserialization of untrusted data in Roundcube Webmail</title><link>https://agentprime.io/advisories/CVE-2026-114724/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-114724/</guid><description>CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 22 Oct 2026 01:48:23 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-114723: Resource allocation without limits in Roundcube Webmail</title><link>https://agentprime.io/advisories/CVE-2026-114723/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-114723/</guid><description>CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 22 Oct 2026 01:44:01 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-114722: Roundcube Webmail: Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a CSS scoping…</title><link>https://agentprime.io/advisories/CVE-2026-114722/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-114722/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 22 Oct 2026 01:39:43 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-114721: Incorrect authorization in Roundcube Webmail</title><link>https://agentprime.io/advisories/CVE-2026-114721/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-114721/</guid><description>CVSS 3.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 22 Oct 2026 01:36:10 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-114720: CRLF injection in Roundcube Webmail</title><link>https://agentprime.io/advisories/CVE-2026-114720/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-114720/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 22 Oct 2026 01:32:44 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-114719: Cross-site request forgery in Roundcube Webmail</title><link>https://agentprime.io/advisories/CVE-2026-114719/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-114719/</guid><description>CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 22 Oct 2026 01:28:45 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-114718: Cross-site scripting in Roundcube Webmail</title><link>https://agentprime.io/advisories/CVE-2026-114718/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-114718/</guid><description>CVSS 4.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 22 Oct 2026 01:24:46 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-114717: Roundcube Webmail: Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header…</title><link>https://agentprime.io/advisories/CVE-2026-114717/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-114717/</guid><description>CVSS 4.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 22 Oct 2026 01:21:14 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-114716: Roundcube Webmail: Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header…</title><link>https://agentprime.io/advisories/CVE-2026-114716/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-114716/</guid><description>CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 22 Oct 2026 01:17:45 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-114715: Incorrect authorization in Roundcube Webmail</title><link>https://agentprime.io/advisories/CVE-2026-114715/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-114715/</guid><description>CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 22 Oct 2026 01:13:35 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-114714: Path traversal in Roundcube Webmail</title><link>https://agentprime.io/advisories/CVE-2026-114714/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-114714/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 22 Oct 2026 01:08:34 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-113386: CRLF injection in Roundcube Webmail</title><link>https://agentprime.io/advisories/CVE-2026-113386/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-113386/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 20 Oct 2026 04:53:46 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-75010: Roundcube Webmail: In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3…</title><link>https://agentprime.io/advisories/CVE-2026-75010/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-75010/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 17 Aug 2026 13:01:26 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-75007: Command injection in Roundcube Webmail</title><link>https://agentprime.io/advisories/CVE-2026-75007/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-75007/</guid><description>CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 17 Aug 2026 12:58:48 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-75006: Server-side request forgery in Roundcube Webmail</title><link>https://agentprime.io/advisories/CVE-2026-75006/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-75006/</guid><description>CVSS 5.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 17 Aug 2026 12:56:47 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-75004: Command injection in Roundcube Webmail</title><link>https://agentprime.io/advisories/CVE-2026-75004/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-75004/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 17 Aug 2026 12:53:50 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-75003: Roundcube Webmail: In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3…</title><link>https://agentprime.io/advisories/CVE-2026-75003/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-75003/</guid><description>CVSS 5.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 17 Aug 2026 12:50:51 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-75002: Command injection in Roundcube Webmail</title><link>https://agentprime.io/advisories/CVE-2026-75002/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-75002/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 17 Aug 2026 12:48:41 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-75000: Roundcube Webmail: In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3…</title><link>https://agentprime.io/advisories/CVE-2026-75000/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-75000/</guid><description>CVSS 5.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 17 Aug 2026 12:45:56 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-74999: Cross-site scripting in Roundcube Webmail</title><link>https://agentprime.io/advisories/CVE-2026-74999/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-74999/</guid><description>CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 17 Aug 2026 12:42:51 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-74998: Cross-site scripting in Roundcube Webmail</title><link>https://agentprime.io/advisories/CVE-2026-74998/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-74998/</guid><description>CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 17 Aug 2026 12:40:29 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-74997: OS command injection in Roundcube Webmail</title><link>https://agentprime.io/advisories/CVE-2026-74997/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-74997/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 17 Aug 2026 12:37:45 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-54432: Cross-site scripting in Roundcube Webmail</title><link>https://agentprime.io/advisories/CVE-2026-54432/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-54432/</guid><description>CVSS 4.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 14 Jul 2026 16:21:55 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-54433: Cross-site scripting in Roundcube Webmail</title><link>https://agentprime.io/advisories/CVE-2026-54433/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-54433/</guid><description>CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 14 Jul 2026 16:18:16 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-62644: Authentication bypass by spoofing in Roundcube Webmail</title><link>https://agentprime.io/advisories/CVE-2026-62644/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-62644/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 14 Jul 2026 15:55:22 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-62643: Server-side request forgery in Roundcube Webmail</title><link>https://agentprime.io/advisories/CVE-2026-62643/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-62643/</guid><description>CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 14 Jul 2026 15:51:46 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-62642: Infinite loop in Roundcube Webmail</title><link>https://agentprime.io/advisories/CVE-2026-62642/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-62642/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 14 Jul 2026 15:49:17 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-62641: Resource allocation without limits in Roundcube Webmail</title><link>https://agentprime.io/advisories/CVE-2026-62641/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-62641/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 14 Jul 2026 15:46:29 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-48849: Cross-site scripting in Roundcube Webmail</title><link>https://agentprime.io/advisories/CVE-2026-48849/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-48849/</guid><description>CVSS 4.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 25 May 2026 19:30:38 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-48848: Cross-site scripting in Roundcube Webmail</title><link>https://agentprime.io/advisories/CVE-2026-48848/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-48848/</guid><description>CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 25 May 2026 19:27:54 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-48847: Roundcube Webmail: Roundcube Webmail 1.6.x before 1.6.16…</title><link>https://agentprime.io/advisories/CVE-2026-48847/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-48847/</guid><description>CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 25 May 2026 19:23:40 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-48846: Roundcube Webmail: In Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1…</title><link>https://agentprime.io/advisories/CVE-2026-48846/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-48846/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 25 May 2026 19:21:09 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-48845: Roundcube Webmail: In Roundcube Webmail 1.6.x between 1.6.14 and 1.6.16 and 1.7.x before 1.7.1…</title><link>https://agentprime.io/advisories/CVE-2026-48845/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-48845/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 25 May 2026 19:18:09 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-48844: Roundcube Webmail: Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1 has insecure code evaluation…</title><link>https://agentprime.io/advisories/CVE-2026-48844/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-48844/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 25 May 2026 19:14:48 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-48843: Server-side request forgery in Roundcube Webmail</title><link>https://agentprime.io/advisories/CVE-2026-48843/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-48843/</guid><description>CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 25 May 2026 19:11:04 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-48842: SQL injection in Roundcube Webmail</title><link>https://agentprime.io/advisories/CVE-2026-48842/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-48842/</guid><description>CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 25 May 2026 19:06:37 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-26079: Roundcube Webmail: Roundcube Webmail before 1.5.13 and 1.6 before 1.6.13 allows Cascading Style Sheets (CSS)…</title><link>https://agentprime.io/advisories/CVE-2026-26079/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-26079/</guid><description>CVSS 4.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 11 Feb 2026 04:27:24 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-25916: Roundcube Webmail: Roundcube Webmail before 1.5.13 and 1.6 before 1.6.13…</title><link>https://agentprime.io/advisories/CVE-2026-25916/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-25916/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 09 Feb 2026 08:14:10 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-68461: Cross-site scripting in Roundcube Webmail</title><link>https://agentprime.io/advisories/CVE-2025-68461/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-68461/</guid><description>CVSS 7.2 (High). Critical: In CISA’s KEV catalogue since 20 Feb 2026: it is known to be exploited. CVSS score 7.2 (7.0 or more) and EPSS 0.27 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 18 Dec 2025 05:00:54 GMT</pubDate><category>CVE</category><category>critical</category><category>KEV</category></item><item><title>CVE-2025-68460: Improper output encoding in Roundcube Webmail</title><link>https://agentprime.io/advisories/CVE-2025-68460/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-68460/</guid><description>CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 18 Dec 2025 04:54:13 GMT</pubDate><category>CVE</category></item></channel></rss>