Approved changes feed: RSS · Atom
cpe:2.3:a:roundcube:webmail:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Roundcube (e9332c9d-8d56-558e-b31a-ef4bbc8643b9) |
|---|---|
| Product | Webmail (aca6980c-c41a-59dc-91cb-067d061f918a) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:docker/roundcube/roundcubemail |
purl2cpe | 2026-06-01 10:11:31.586579 |
pkg:github/roundcube/roundcubemail |
purl2cpe | 2026-06-01 10:11:31.586581 |
pkg:rpm/fedora/roundcubemail |
purl2cpe | 2026-06-01 10:11:31.586583 |
pkg:rpm/opensuse/roundcubemail |
purl2cpe | 2026-06-01 10:11:31.586584 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-62644 |
vulnerable | 2026-07-29 01:06:19.209318 |
Details available
MEDIUM (6.4)
In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, the password plugin of the Roundcube Webmail was subject to username spoofing via session data, which could lead to account takeover.
Published: 2026-07-14T15:55:22.925Z
Updated: 2026-07-14T17:15:20.139Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-62643 |
vulnerable | 2026-07-29 01:06:19.209021 |
Details available
HIGH (7.2)
In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, insufficient Cascading Style Sheets (CSS) sanitization in HTML e-mail messages may lead to SSRF or Information Disclosure, e.g., if stylesheet links point to local network hosts. NOTE: this issue exists because of insufficient fixes for CVE-2026-35540 and CVE-2026-48843.
Published: 2026-07-14T15:51:46.996Z
Updated: 2026-07-14T17:17:16.894Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-62642 |
vulnerable | 2026-07-29 01:06:19.208715 |
Details available
MEDIUM (4.3)
In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, an infinite loop was discovered in the TNEF decoder, which may lead to denial of service upon opening an email with a TNEF attachment.
Published: 2026-07-14T15:49:17.798Z
Updated: 2026-07-14T17:18:18.192Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-62641 |
vulnerable | 2026-07-29 01:06:19.208331 |
Details available
MEDIUM (4.3)
In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, the TNEF decoder was subject to denial of service via a crafted compressed-RTF size.
Published: 2026-07-14T15:46:29.138Z
Updated: 2026-07-14T17:27:50.013Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-54433 |
vulnerable | 2026-07-29 01:00:27.816870 |
Details available
HIGH (7.2)
In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, there is Stored Cross-Site Scripting (XSS) via a crafted plain-text email message. The attacker-controlled JavaScript executes within the victim's authenticated session simply by opening or previewing the message (zero-click).
Published: 2026-07-14T16:18:16.549Z
Updated: 2026-07-15T14:10:33.042Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-54432 |
vulnerable | 2026-07-29 01:00:27.816666 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-9818 |
vulnerable | 2026-06-08 08:08:59.090386 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-48849 |
vulnerable | 2026-06-08 08:05:12.331487 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-48848 |
vulnerable | 2026-06-08 08:05:12.331209 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-48847 |
vulnerable | 2026-06-08 08:05:12.331075 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-48846 |
vulnerable | 2026-06-08 08:05:12.330960 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-48845 |
vulnerable | 2026-06-08 08:05:12.330841 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-48844 |
vulnerable | 2026-06-08 08:05:12.330707 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-48843 |
vulnerable | 2026-06-08 08:05:12.330476 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-48842 |
vulnerable | 2026-06-08 08:05:12.330126 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-35545 |
vulnerable | 2026-06-08 07:59:14.095587 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-35544 |
vulnerable | 2026-06-08 07:59:14.095328 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-35543 |
vulnerable | 2026-06-08 07:59:14.095100 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-35542 |
vulnerable | 2026-06-08 07:59:14.094873 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-35541 |
vulnerable | 2026-06-08 07:59:14.094630 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-35540 |
vulnerable | 2026-06-08 07:59:14.094204 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-35539 |
vulnerable | 2026-06-08 07:59:14.093832 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-35538 |
vulnerable | 2026-06-08 07:59:14.093566 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-35537 |
vulnerable | 2026-06-08 07:59:14.093237 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-26079 |
vulnerable | 2026-06-08 07:53:20.778961 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-25916 |
vulnerable | 2026-06-08 07:53:20.603337 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-68461 |
vulnerable | 2026-06-08 07:41:21.152463 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-68460 |
vulnerable | 2026-06-08 07:41:21.151968 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-49113 |
vulnerable | 2026-06-08 07:29:12.575247 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-42009 |
vulnerable | 2026-06-08 06:43:55.975489 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-42008 |
vulnerable | 2026-06-08 06:43:55.974992 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-37385 |
vulnerable | 2026-06-08 06:39:47.375129 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-37384 |
vulnerable | 2026-06-08 06:39:47.372551 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-37383 |
vulnerable | 2026-06-08 06:39:47.368444 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-5631 |
vulnerable | 2026-06-08 06:19:44.284733 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-47272 |
vulnerable | 2026-06-08 06:14:24.599784 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-43770 |
vulnerable | 2026-06-08 06:12:37.935323 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-44026 |
vulnerable | 2026-06-08 05:36:44.792181 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-44025 |
vulnerable | 2026-06-08 05:36:44.789919 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-26925 |
vulnerable | 2026-06-08 05:30:45.577196 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-35730 |
vulnerable | 2026-06-08 05:25:01.625797 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-18671 |
vulnerable | 2026-06-08 05:20:57.040985 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-16145 |
vulnerable | 2026-06-08 05:19:27.437527 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-15562 |
vulnerable | 2026-06-08 05:19:26.102571 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-13965 |
vulnerable | 2026-06-08 05:18:01.649801 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-13964 |
vulnerable | 2026-06-08 05:18:01.645652 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-12641 |
vulnerable | 2026-06-08 05:17:58.669774 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-12640 |
vulnerable | 2026-06-08 05:17:58.668794 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-12626 |
vulnerable | 2026-06-08 05:17:58.648276 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-12625 |
vulnerable | 2026-06-08 05:17:58.647333 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-15237 |
vulnerable | 2026-06-08 05:12:56.831518 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-10740 |
vulnerable | 2026-06-08 05:12:25.169638 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-9846 |
vulnerable | 2026-06-08 05:12:08.323352 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-19206 |
vulnerable | 2026-06-08 05:11:15.464404 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-19205 |
vulnerable | 2026-06-08 05:11:15.463991 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-1000071 |
vulnerable | 2026-06-08 05:10:25.390473 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-8114 |
vulnerable | 2026-06-08 05:10:07.242821 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-6820 |
vulnerable | 2026-06-08 05:09:55.002170 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-16651 |
vulnerable | 2026-06-08 05:09:00.688059 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-9920 |
vulnerable | 2026-06-08 05:08:24.973950 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-4069 |
vulnerable | 2026-06-08 05:07:46.634911 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-4068 |
vulnerable | 2026-06-08 05:07:46.631928 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-8864 |
vulnerable | 2026-06-08 05:07:05.625125 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-8793 |
vulnerable | 2026-06-08 05:07:04.916283 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-8105 |
vulnerable | 2026-06-08 05:07:03.185776 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-2181 |
vulnerable | 2026-06-08 05:06:27.644769 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-1433 |
vulnerable | 2026-06-08 05:06:25.658768 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-9587 |
vulnerable | 2026-06-08 05:06:12.187289 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-6172 |
vulnerable | 2026-06-08 05:04:55.548828 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-5645 |
vulnerable | 2026-06-08 05:04:52.898420 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-1904 |
vulnerable | 2026-06-08 05:03:57.174943 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-6121 |
vulnerable | 2026-06-08 05:02:59.563355 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-4668 |
vulnerable | 2026-06-08 05:02:52.078297 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-3507 |
vulnerable | 2026-06-08 05:02:10.262688 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-1253 |
vulnerable | 2026-06-08 05:00:48.456896 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-4078 |
vulnerable | 2026-06-08 04:59:28.973990 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-2937 |
vulnerable | 2026-06-08 04:58:09.697983 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-1492 |
vulnerable | 2026-06-08 04:57:59.619589 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-1491 |
vulnerable | 2026-06-08 04:57:59.606989 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-0464 |
vulnerable | 2026-06-08 04:52:02.813757 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-4077 |
vulnerable | 2026-06-08 04:51:46.874571 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-4076 |
vulnerable | 2026-06-08 04:51:46.865206 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.