Vulnerabilities
Report: CVE-2026-48842 - Roundcube Webmail SQL Injection
CVE ID :CVE-2026-48842 Published : May 25, 2026, 7:06 p.m. | 1 hour, 2 minutes ago Description :Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1 has Pre-authentication SQL injection in the virtuser_query plugin via a preg_replace() backslash escape bypass. Severity: 8.1 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...