Vulnerabilities
Report: Breaking: CVE-2026-35545 - Roundcube Webmail SVG Animate Element Injection Vulnerability
CVE ID :CVE-2026-35545 Published : April 3, 2026, 4:02 a.m. | 1 hour, 23 minutes ago Description :An issue was discovered in Roundcube Webmail before 1.5.15 and 1.6.15. The remote image blocking feature can be bypassed via SVG content in an e-mail message. This may lead to information disclosure or access-control bypass. This involves the animate element with attributeName=fill/filter/stroke. Severity: 5.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE Details
Impact:
information disclosure