Roundcube
11 Roundcube flaws are on CISA's list of vulnerabilities attackers have used, 2 of them added in 2026. The latest was added Feb 20, 2026.
11on CISA's list, all time
2added in 2026
0in the last 90 days
0used by ransomware
0zero-days, all time
Exploited flaws added each year
Most-hit products
| Product | Exploited flaws | Most recent |
|---|---|---|
| Webmail | 7 | Feb 20, 2026 |
| Roundcube Webmail | 4 | Jun 22, 2023 |
Latest Roundcube flaws
- WebmailRoundCube Webmail Deserialization of Untrusted Data Vulnerability
- WebmailRoundCube Webmail Cross-site Scripting Vulnerability
- WebmailRoundCube Webmail Cross-Site Scripting Vulnerability
- WebmailRoundCube Webmail Cross-Site Scripting (XSS) Vulnerability
- WebmailRoundcube Webmail Cross-Site Scripting (XSS) Vulnerability
- WebmailRoundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability
- WebmailRoundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability
- Roundcube WebmailRoundcube Webmail Remote Code Execution Vulnerability
- Roundcube WebmailRoundcube Webmail Cross-Site Scripting (XSS) Vulnerability
- Roundcube WebmailRoundcube Webmail SQL Injection Vulnerability
- Roundcube WebmailRoundcube Webmail File Disclosure Vulnerability
Counts come from CISA's Known Exploited Vulnerabilities catalog, which lists flaws with reliable evidence of real attacks. A higher count often reflects how widely a vendor's products are used and targeted, not only how secure they are.