Report: CVE-2026-35542 - Roundcube Webmail Background Attribute Injection Vulnerability

Report: CVE-2026-35542 - Roundcube Webmail Background Attribute Injection Vulnerability

CVE ID :CVE-2026-35542 Published : April 3, 2026, 3:54 a.m. | 1 hour, 31 minutes ago Description :An issue was discovered in Roundcube Webmail before 1.5.14 and 1.6.14. The remote image blocking feature can be bypassed via a crafted background attribute of a BODY element in an e-mail message. This may lead to information disclosure or access-control bypass. Severity: 5.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE Details

Severity
MEDIUM
Published
April 3, 2026
Impact: information disclosure