Conversation

• L Latest Newsroom Latest Newsroom remote Sep 25, 2026, 10:14 AM You are here

  Roundcube Pre-Auth SQL Injection Flaw Actively Exploited in the Wild

  Roundcube Pre-Auth SQL Injection Flaw Actively Exploited in the Wild

  

  The Canadian Centre for Cyber Security has warned that a now-patched Roundcube Webmail vulnerability is being actively exploited in the wild. The vulnerability in question is CVE-2026-48842 (CVSS scor ... Read more

  Published Date: Sep 25, 2026 (3 days, 23 hours ago)

  Vulnerabilities has been mentioned in this article.

  CVE-2026-48842 CVE-2025-68461 CVE-2025-49113
  source