CVE security advisories and vulnerability history for roundcube/roundcubemail by roundcube.
Last updated
roundcube roundcube/roundcubemail has 10 published CVE records since 2025, of which 1 are in CISA's Known Exploited Vulnerabilities catalog and 1 have a known public exploit. The average CVSS base score across scored CVEs is 6.1.
How the CVSS severity of roundcube roundcube/roundcubemail's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.
In CISA’s Known Exploited Vulnerabilities catalog
1
One of roundcube roundcube/roundcubemail's CVEs is confirmed exploited in the wild.
Public exploits
1
One of roundcube roundcube/roundcubemail's CVEs has a known public exploit available.
Browse every roundcube roundcube/roundcubemail version named in a CVE, then pick one to see only the CVEs that affect it.
10 CVEs
Added to CISA KEV 2026-02-20
The CWE weakness categories most often found in roundcube roundcube/roundcubemail CVEs. Follow any weakness for its full explanation.
How many roundcube roundcube/roundcubemail CVEs were published each year.
Browse vulnerabilities for other products by roundcube.
Common questions about roundcube roundcube/roundcubemail vulnerabilities.
Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.
Get an alert for each new roundcube roundcube/roundcubemail CVE, with AI-written analysis and remediation steps.
