CVE ID :CVE-2026-35539 Published : April 3, 2026, 3:39 a.m. | 1 hour, 46 minutes ago Description :An issue was discovered in Roundcube Webmail before 1.5.14 and 1.6.14. XSS exists because of insufficient HTML attachment sanitization in preview mode. A victim must preview a text/html attachment. Severity: 6.1 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...