Report: CVE-2026-35537 - - 2025 Update

Report: CVE-2026-35537 - - 2025 Update

CVE ID :CVE-2026-35537 Published : April 3, 2026, 4:17 a.m. | 1 hour, 8 minutes ago Description :An issue was discovered in Roundcube Webmail before 1.5.14 and 1.6.14. Unsafe deserialization in the redis/memcache session handler may lead to arbitrary file write operations by unauthenticated attackers via crafted session data. Severity: 3.7 | LOW Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE Details

Severity
LOW
Published
April 3, 2026
Affected Product: redis