Roundcube webmail vulnerability in attackers’ crosshairs

Roundcube webmail vulnerability in attackers’ crosshairs

Threat actors have exploited a high-level security flaw in Roundcube, the popular open source webmail client, the Canadian Center for Cyber ​​Security warns. The security flaw is tracked as CVE-2026-48842 (CVSS score of 8.1) and is described as an SQL injection virtuser_query Plugin that can be exploited without authentication. The plugin resolves email addresses into … Read more