Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

7 records

Release: Roundcube Webmail 1.5.14, 1.6.14 Clear all filters
TI-2026-27651 CVE-2026-35541 · GHSA-46pv-mj2g-93gh

Type confusion in Roundcube Webmail

Priority LOW 19

An issue was discovered in Roundcube Webmail before 1.5.14 and 1.6.14.

CVSS 3.1MEDIUM 4.2 Network Low privileges No interaction EPSS 0.00252 Published 2026-04-03 Fixed in 1.5.14, 1.6.14 +1 CWE-843
TI-2026-27649 CVE-2026-35539 · GHSA-x4q5-8j5g-hpjc

Cross-site scripting in Roundcube Webmail

Priority LOW 27

An issue was discovered in Roundcube Webmail before 1.5.14 and 1.6.14.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00261 Published 2026-04-03 Fixed in 1.5.14, 1.6.14 +1 CWE-79