Vulnerabilities
Report: Breaking: CVE-2026-48848 - Roundcube Webmail CSS Injection Vulnerability
CVE ID :CVE-2026-48848 Published : May 25, 2026, 7:27 p.m. | 41 minutes ago Description :Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7 has insufficient HTML sanitization that could lead to Cascading Style Sheets (CSS) injection via an SVG document that has an animate element with the attributeName attribute. Severity: 7.2 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...