Roundcube Webmail Vulnerability in Attackers’ Crosshairs

Tracked as CVE-2026-48842, the exploited bug is an SQL injection that can be exploited without authentication.

The post Roundcube Webmail Vulnerability in Attackers’ Crosshairs appeared first on SecurityWeek.

https://www.securityweek.com/roundcube-webmail-vulnerability-in-attackers-crosshairs/