Roundcube: known exploited vulnerabilities
11Catalog entries
0Ransomware use
2026-02-20Last added
2026-03-13Latest due date
Get an email when Roundcube is next added.Watch Roundcube
| CVE | Product / vulnerability | Due |
|---|---|---|
| CVE-2025-68461 | Webmail RoundCube Webmail Cross-site Scripting Vulnerability |
2026-03-13 |
| CVE-2025-49113 | Webmail RoundCube Webmail Deserialization of Untrusted Data Vulnerability |
2026-03-13 |
| CVE-2024-42009 | Webmail RoundCube Webmail Cross-Site Scripting Vulnerability |
2025-06-30 |
| CVE-2024-37383 | Webmail RoundCube Webmail Cross-Site Scripting (XSS) Vulnerability |
2024-11-14 |
| CVE-2020-13965 | Webmail Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability |
2024-07-17 |
| CVE-2023-43770 | Webmail Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability |
2024-03-04 |
| CVE-2023-5631 | Webmail Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability |
2023-11-16 |
| CVE-2021-44026 | Roundcube Webmail Roundcube Webmail SQL Injection Vulnerability |
2023-07-13 |
| CVE-2020-12641 | Roundcube Webmail Roundcube Webmail Remote Code Execution Vulnerability |
2023-07-13 |
| CVE-2020-35730 | Roundcube Webmail Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability |
2023-07-13 |
| CVE-2017-16651 | Roundcube Webmail Roundcube Webmail File Disclosure Vulnerability |
2022-05-03 |