Roundcube
Roundcube known exploited vulnerabilities
Every Roundcube vulnerability in CISA's Known Exploited Vulnerabilities catalog, newest first.
11 CVEs
- CVE-2025-68461RoundCube Webmail Cross-site Scripting Vulnerability · added February 20, 2026
- CVE-2025-49113RoundCube Webmail Deserialization of Untrusted Data Vulnerability · added February 20, 2026
- CVE-2024-42009RoundCube Webmail Cross-Site Scripting Vulnerability · added June 9, 2025
- CVE-2024-37383RoundCube Webmail Cross-Site Scripting (XSS) Vulnerability · added October 24, 2024
- CVE-2020-13965Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability · added June 26, 2024
- CVE-2023-43770Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability · added February 12, 2024
- CVE-2023-5631Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability · added October 26, 2023
- CVE-2021-44026Roundcube Webmail SQL Injection Vulnerability · added June 22, 2023
- CVE-2020-35730Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability · added June 22, 2023
- CVE-2020-12641Roundcube Webmail Remote Code Execution Vulnerability · added June 22, 2023
- CVE-2017-16651Roundcube Webmail File Disclosure Vulnerability · added November 3, 2021
Source: CISA Known Exploited Vulnerabilities Catalog (public domain).