Report: Breaking: CVE-2026-35545 - Roundcube Webmail SVG Animate Element Injection Vulnerability

Report: Breaking: CVE-2026-35545 - Roundcube Webmail SVG Animate Element Injection Vulnerability

CVE ID :CVE-2026-35545 Published : April 3, 2026, 4:02 a.m. | 1 hour, 23 minutes ago Description :An issue was discovered in Roundcube Webmail before 1.5.15 and 1.6.15. The remote image blocking feature can be bypassed via SVG content in an e-mail message. This may lead to information disclosure or access-control bypass. This involves the animate element with attributeName=fill/filter/stroke. Severity: 5.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE Details

Severity
MEDIUM
Published
April 3, 2026
Impact: information disclosure