Report: Breaking: CVE-2026-48848 - Roundcube Webmail CSS Injection Vulnerability

Report: Breaking: CVE-2026-48848 - Roundcube Webmail CSS Injection Vulnerability

CVE ID :CVE-2026-48848 Published : May 25, 2026, 7:27 p.m. | 41 minutes ago Description :Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7 has insufficient HTML sanitization that could lead to Cascading Style Sheets (CSS) injection via an SVG document that has an animate element with the attributeName attribute. Severity: 7.2 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE Details

Severity
HIGH
Published
May 25, 2026