HackZoneLabs News
Newsletter

Roundcube

11 vulnerabilities in Roundcube products that CISA lists as exploited.

CVEVendorProductNameAddedFix dueRansomware
CVE-2025-49113RoundcubeWebmailRoundCube Webmail Deserialization of Untrusted Data Vulnerability20 Feb 202613 Mar 2026Unknown
CVE-2025-68461RoundcubeWebmailRoundCube Webmail Cross-site Scripting Vulnerability20 Feb 202613 Mar 2026Unknown
CVE-2024-42009RoundcubeWebmailRoundCube Webmail Cross-Site Scripting Vulnerability9 Jun 202530 Jun 2025Unknown
CVE-2024-37383RoundcubeWebmailRoundCube Webmail Cross-Site Scripting (XSS) Vulnerability24 Oct 202414 Nov 2024Unknown
CVE-2020-13965RoundcubeWebmailRoundcube Webmail Cross-Site Scripting (XSS) Vulnerability26 Jun 202417 Jul 2024Unknown
CVE-2023-43770RoundcubeWebmailRoundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability12 Feb 20244 Mar 2024Unknown
CVE-2023-5631RoundcubeWebmailRoundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability26 Oct 202316 Nov 2023Unknown
CVE-2020-12641RoundcubeRoundcube WebmailRoundcube Webmail Remote Code Execution Vulnerability22 Jun 202313 Jul 2023Unknown
CVE-2020-35730RoundcubeRoundcube WebmailRoundcube Webmail Cross-Site Scripting (XSS) Vulnerability22 Jun 202313 Jul 2023Unknown
CVE-2021-44026RoundcubeRoundcube WebmailRoundcube Webmail SQL Injection Vulnerability22 Jun 202313 Jul 2023Unknown
CVE-2017-16651RoundcubeRoundcube WebmailRoundcube Webmail File Disclosure Vulnerability3 Nov 20213 May 2022Unknown