Roundcube Webmail Patches 12 Security Flaws, Including Zero-Click XSS and SSRF Bypass
Mon Sep 07 2026
Open Source
Patch Management
Vulnerability
cybersecuritynews.com
Roundcube Webmail has released security updates for its 1.6 LTS and 1.7 branches, fixing 12 vulnerabilities that could expose users and servers to cross-site scripting, email header injection, cross-user data access, remote-content bypasses, and server-side request forgery attacks. The new releases, Roundcube 1.6.19 and 1.7.4, address flaws in how the open-source webmail platform processes email […]
The post Roundcube Webmail Patches 12 Security Flaws, Including Zero-Click XSS and SSRF Bypass appeared first on Cyber Security News.