100 CVEs
11 in CISA KEV
Roundcube Vulnerabilities
CVE security advisories and vulnerability history for Roundcube.
100
Total CVEs
Published
11
In CISA KEV
Exploited in the wild
20
Public exploits
PoC or exploit code
6.4
Avg CVSS
2005–2026
Overview
Roundcube has 100 published CVE records since 2005, of which 11 are in CISA's Known Exploited Vulnerabilities catalog and 20 have a known public exploit. The average CVSS base score across scored CVEs is 6.4.
This page aggregates every publicly disclosed vulnerability (CVE) affecting Roundcube products, with severity breakdowns, the most-affected products, the most common weakness types, and the latest disclosures.