netVigilance Vulnerability intelligence since 2004

Roundcube

11 Roundcube vulnerabilities with confirmed exploitation in the wild, as published by CISA; 11 past the federal remediation deadline. This is a static slice of the catalog — open the full catalog for search and filters.

Known exploited vulnerabilities for Roundcube
Vulnerability Status
overdue 181d2026-03-13 CVE-2025-68461 Roundcube / Webmail RoundCube Webmail Cross-site Scripting Vulnerability 2026-02-20 6.1 past due
overdue 181d2026-03-13 CVE-2025-49113 Roundcube / Webmail RoundCube Webmail Deserialization of Untrusted Data Vulnerability 2026-02-20 8.8 past due
overdue 437d2025-06-30 CVE-2024-42009 Roundcube / Webmail RoundCube Webmail Cross-Site Scripting Vulnerability 2025-06-09 9.3 past due
overdue 665d2024-11-14 CVE-2024-37383 Roundcube / Webmail RoundCube Webmail Cross-Site Scripting (XSS) Vulnerability 2024-10-24 6.1 past due
overdue 785d2024-07-17 CVE-2020-13965 Roundcube / Webmail Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability 2024-06-26 6.1 past due
overdue 920d2024-03-04 CVE-2023-43770 Roundcube / Webmail Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability 2024-02-12 6.1 past due
overdue 1029d2023-11-16 CVE-2023-5631 Roundcube / Webmail Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability 2023-10-26 5.4 past due
overdue 1155d2023-07-13 CVE-2021-44026 Roundcube / Roundcube Webmail Roundcube Webmail SQL Injection Vulnerability 2023-06-22 9.8 past due
overdue 1155d2023-07-13 CVE-2020-35730 Roundcube / Roundcube Webmail Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability 2023-06-22 6.1 past due
overdue 1155d2023-07-13 CVE-2020-12641 Roundcube / Roundcube Webmail Roundcube Webmail Remote Code Execution Vulnerability 2023-06-22 9.8 past due
overdue 1591d2022-05-03 CVE-2017-16651 Roundcube / Roundcube Webmail Roundcube Webmail File Disclosure Vulnerability 2021-11-03 7.8 past due